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Chapter 1 


The impredicativity of 
induction 


The induction principle is this: if a property holds for 0, and if whenever 
it holds for a number n it also holds for n + 1, then the property holds for 
all numbers. For example, let #(n) be the property that there exists a 
number m such that 2-m =n-(n+ 1). Then 6(0) (let m = 0). Suppose 
2-m=n-(n+1). Then 2-(m4+n+4+1) = (n+1)-((n+1) +1), and thus if 
@(n) then @(n + 1). The induction principle allows us to conclude @(n) for 
all numbers n. As a second example, let 1(n) be the property that there 
exists a non-zero number m that is divisible by all numbers from 1 to n. 
Then 7(0) (let m = 1). Suppose m is a non-zero number that is divisible 
by all numbers from 1 to n. Then m-(n + 1) is a non-zero number that is 
divisible by all numbers from 1 to n + 1, and thus if x(n) then a(n + 1). 
The induction principle would allow us to conclude a(n) for all numbers n. 

The reason for mistrusting the induction principle is that it involves an 
impredicative concept of number. It is not correct to argue that induction 
only involves the numbers from 0 to n; the property of n being established 
may be a formula with bound variables that are thought of as ranging over 
all numbers. That is, the induction principle assumes that the natural 
number system is given. A number is conceived to be an object satisfy- 
ing every inductive formula; for a particular inductive formula, therefore, 
the bound variables are conceived to range over objects satisfying every 
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inductive formula, including the one in question. 

In the first example, at least one can say in advance how big is the 
number mm whose existence is asserted by @(n): it is no bigger than n-(n+1). 
This induction is bounded, and one can hope that a predicative treatment 
of numbers can be constructed that yields the result @(n). In the second 
example, the number m whose existence is asserted by a(n) cannot be 
bounded in terms of the data of the problem. 

It appears to be universally taken for granted by mathematicians, what- 
ever their views on foundational questions may be, that the impredicativity 
inherent in the induction principle is harmless—that there is a concept of 
number given in advance of all mathematical constructions, that discourse 
within the domain of numbers is meaningful. But numbers are symbolic 
constructions; a construction does not exist until it is made; when some- 
thing new is made, it is something new and not a selection from a pre- 
existing collection. There is no map of the world because the world is 
coming into being. 

Let us explore the possibility of developing arithmetic predicatively. 


Chapter 2 


Logical terminology 


I tried several times to write a brief, clear summary of the logical ter- 
minology that will be used in this investigation, but it always came out 
long and muddy. Instead, I refer the reader to the beautiful exposition in 
Shoenfield’s book {Sh], especially the first four chapters. Our logical ter- 
minology and notation are those of [Sh] except for some departures and 
additions that will be indicated. 

Lower case italic letters, possibly with 0, 1, ... as a subscript, are vari- 
ables. The order a,b,...,2,40,bo,...,20,@1,--- of the variables is called 
alphabetical order. Roman letters are used as in [Sh] as syntactical vari- 
ables when talking about expressions. 

We define A,|a] as follows: if no variable occurring in the term a occurs 
bound in the formula A, substitute a for each free occurrence of the vari- 
able x in A; otherwise let x,,...,x, be in alphabetical order the variables 
that occur in a and occur bound in A, let y;,...,y, be in alphabetical 
order the first v variables distinct from all variables occurring ic. A or a, 
substitute y, for each bound occurrence of x, in A for all uw from 1 to v, 
and then substitute a for each free occurrence of x. For example, if A is 


vavy (c+ y)tz=2+(y+2), 


then A,[O! is VzVy (c+ y) +0 = 2+ (y+0) and A,{z] is VaVy (a+ y)+2= 
a+ (y+). We write 


Axyx,(21--. ay] for Ax, [ai]-..x, [ar]. 
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We make the following abbreviations, in addition to those of [Sh]. If 
Pi,---,P, are binary predicate symbols, we write 


aoP1a1...a,-1Pya, for agpia, & --- & ay_ip,ay, 


asinz =y=zforr=y & y = 2. We follow [Sh] is associating Vv, &, and 
— from right to left, and letting V and & take precedence over — and ++ 
in restoring parentheses, so that 


Ayo A137 AY 
is equivalent to 
A, & » & Ay17 AL, 
but we adopt the convention that 
Aor SA, OA, 
is an abbreviation for 
(Ai Az) & «+ & (Aya + AL). 


If A is A, > Ag, we write hypA for Ay and conA for Ay. If A is Ay ~ Ao, 
we write JhsA for Ay and rhsA for Ay. We write 


JixA for Sx(A & Vy(Axly] > y =x)), 


where y is the first variable in alphabetical order distinct from x and all 

variables occurring in A. If all bound occurrences of x in A occur in the 

part IxB, we write scope:,A for B, and similarly with J replaced by 3! or V. 
We write the defining axiom of a function symbol f as 


fxi...x,=y oD 


(instead of y = fx, ...x,  D as in [Sh,§4.6]). Sometimes we write it in the 
form 


fx,...x, =y++ A, otherwise y =e 


where e is aconstant. This is an abbreviation for 


fxy...x,=yoAV(adyA & y=e). 
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Then the existence condition is trivial, but the uniqueness condition still 
has to be verified. Also, we sometimes adjoin a new function symbol f by 
writing 


fx;...x, =a 


where a is a term containing no variable other than x,,...,x,; the defining 
axiom is understood to be 


fxy...x,=yoy=a 


where y is the first variable in alphabetical order distinct from x),...,Xv. 

A formula will be called unary in case one and only one variable occurs 
free in it. If C is unary and x is the variable occurring free in it, we write 
Cla] for C,[a]. Let C be a unary formula. Then we write Ac for the formula 
obtained by replacing each part of A of the form JyB by Sy(Cly| & B). (We 
follow {Sh] in regarding Vy as an abbreviation for —3y-; if one chooses not 
to eliminate the defined symbol V, then an equivalent formula is obtained if 
in addition one replaces each part of A of the form VyB by Vy(Cly] — B).) 
Let x;,...,X, be in alphabetical order the variables occurring free in A; 
then we write 


C{freeA) for Clxy} & --» & C[x,}. 


If A is closed, then C(freeA) is the empty expression; we make the conven- 
tion that if A is closed, then all occurrences of “C(freeA)” together with 
attendant logical connectives are to be deleted. (In general, I will not worry 
about the distinction between use and mention, but in this case ] use quo- 
tation marks lest the reader be puzzled as to how to go about deleting the 
empty expression.) We write 


A® for C(freeA) + Ac 


and call A®° the relativization of A by C. 
Let C be a unary formula of a theory T. For f a v-ary function symbol, 
we say that C respects f in case 


Fr Clay] + --- + Clz,] > Cifz,...2,]. 
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We say that C respects A in case ty AC. We say that C is inductive in 
case C respects 0 and S (assuming T to contain the constant 0 and the 
unary function symbol S), so that C is inductive if and only if 


Fy Clo] & (Ciz} > C[Sz]}) 


(or, equivalently, if and only if +> Cj0] & Vx(C[z]  C|Sz})). We say that C 
is hereditary in case 


Fe Cir] & y< a — Cly| 


(assuming T to contain the binary predicate symbol <). If C' is also unary, 
we say that C’ is stronger than C in case 


Fe Clr] - Clg}. 


If x occurs free in A and y,,...,y, are in alphabetical order the variables 
distinct from x that occur free in A, we write 


Ajx for Vy1---Vy,A, 


and we say that A in inductive tn x in case Aj/, is inductive. If p is a unary 
predicate sumbol, we say that p is inductive, etc., in case the formula p(z) 
is inductive, etc. 

The definitions in the preceding paragraph are all relative to the the- 
ory T. If T is not clear from the context, we add in T. 

We write 


ind,A for A,|0) & Vx{A —» A,(Sx]). 


An induction formula is a formula of the form ind,A — A. 

We write T[B,....,By! for the theory obtained by adjoining to the lan- 
guage of T all of the new nonlogical symbols in B,,...,B, and then adjoin- 
ing B,....,B, as nonlogica] axioms. 

Let C be a unary formula of the theory T. We say that C respects T 
in case C respects every function symbo] and nonlogical axiom of T and 
ty JrCiz. This last condition follows from the first if T contains a con- 
stant (O-ary function symbol) e, for then Fp Cle]. Let C respect T, let U 
be the extension by definitions of T obtained by adjoining the unary pred- 
icate symbol] U; with defining axiom Ujz © C/z], and let uy be u for each 
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nonlogical sumbol u of T. Then we have an interpretation (see [Sh,§4.7]) of 
T in U, which we cail the interpretation associated with C. 

We write (£), where € is some label, as an abbreviation for the formula 
with that label, and we do not hesitate to treat it as a formula. For example, 
the formula with label 3.4 will be found in Chapter 3; it is r+Sy = S(z+y), 
so (3.4),/0] is z+ SO = S(x +0). 

When we introduce a hypothesis in a proof we use the word suppose, 
and the discharge of the hypothesis is indicated by the word thus. (Suppose 
we adopt this convention (suppose, that is, that in proofs we use these two 
words (suppose and thus) in the manner indicated, and only thus). Then 
these two words (suppose and thus) function much as parentheses (suppose 
playing the role of the left parenthesis, with the role of the right parenthesis 
being played by thus). We hope to achieve clarity thus.) 

As is customary in mathematics, we use letters—for the purposes of this 
paragraph, a letter is an italic lower case Jetter possibly with 0, 1,... asa 
subscript--sometimes as variables and, in the course of a proof, sometimes 
as constants, and a single letter may play both roles in a given proof. When 
we have proved 4x, --- 4x,A, we indicate the introduction of constants (see 
the discussion of special constants in |Sh,§4.2]) by writing 


there exist x;, ..., and x, such that A 


(with the appropriate change in grammar or punctuation when v is 1 or 2). 
We write 


Jet x) = ay,....Xpy = ay 
instead of 
there exist x1, ..., and x, such that x; =a, & --- & x, = a,. 


A numeral is an expression of the form S---S0. We use n, possibly with 
a subscript, as a syntactical variable for numerals, and / is an abbreviation 
for the numeral with v occurrences of S. 


Chapter 3 


The axioms of arithmetic 


By Peano Arithmetic we mean the theory J whose nonlogical symbols 
are the constant 0, the unary function symbol S (successor), and the binary 
function symbols + and -, and whose nonlogical axioms are 


3.1 Ax. Sx #0, 

3.2 Ax. Sz = Sy > r=y, 

3.3 Az. 2+0=2, 

3.4 Az. c+ Sy =S(x+y), 

3.5 Az. 2-0=0, 

3.6 Az. c-Sy=ar-y+e, 

and all induction formulas in the language of J]. We have adopted the usual 
convention that - takes predecence over + in restoring parentheses, so that 
(3.6) is an abbreviation for r-Sy = (x-y) +42. 

If we simply drop the induction formulas as axioms, then the resulting 
theory is too weak to be of much arithmetical interest; a model-theoretic 
argument to this effect is given by Mostowski, Robinson, and Tarski in 
(MRT, pp.62-64). 

Robinson’s theory (see [Ro}) is the theory Q with the language of J 
whose nonlogical axioms are (3.1)-(3.6) and the following formula (which 
is a theorem of J since it is easily proved by induction): 


R. 240 dy Sy=a. 
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This beautiful and much studied theory is in a sense a minimal axiomati- 
zation of arithmetic. We will work only in theories that are interpretable 


in Q. 


Tt will be convenient to reformulate Q as an open theory. The formula 


3.7 Az. Po=yoSy=rV(cz=0 & y=0) 


is the defining axiom of a unary function symbol P (predecessor) that can 
be adjoined to Q; the existence condition holds by (R) and the uniqueness 
condition holds by (3.2). Let Qp be the theory whose nonlogical symbols 
are those of Q together with P and whose nonlogical axioms are (3.1)-(3.7); 
then (R) is a theorem, but not an axiom, of Qo. 

To get to the main point more quickly, Jet us at first adjoin the associa- 
tive, distributive, and commutative laws: 
3.8 Az. (c+ y)+z=24+ (yt+2), 
3.9 Ar. r-(y+2z)=2-yt+2-2, 
3.10 Az. (x-y)-z= 2: (y-2), 
3.11 Ax r+yzyta, 
3.12 Az. c-y=y-. 


Let Qi be Qo with (3.8)-(3.12) as additional axioms. Later we will inves- 
tigate how to avoid assuming these as axioms. 


Chapter 4 
Order 


The following formula is the defining axiom of a binary predicate symbol 

that we adjoin to Qy: 

41 Defi rs yodzrt+z=y 

Call the resulting theory Q{. In this chapter we prove a few simple theorems 
in Q4- 

4.2 Thm. O<2<2< Sr. 

Proof. We have 0+ 2 = zx by (3.3) and (3.11), soO < z. We have 
2+0 =z by (3.3),sor< az, and z+ S50 = S(x+0) = Sz by (3.4) and (3.3), 
soz < Sz. 

4.3 Thm. 2<0+27=0, 

Proof. Suppose x < 0. Then there exists z such that r+ z = 0. Suppose 
z= 0. Then x = O by (3.3) and thus z = 0 > x = 0, so suppose z # 0. 
Then SPz = z by (3.7), so that x + SPz = 0, and S(z + Pz) = 0 by (3.4), 
which is impossible by (3.1). Thus z = 0 and z = 0, and thus (4.3). 

4.4 Thm. y<Srey<arVy= Sz. 

Proof. Suppose y < z. Then there exists z such that y +z = x, and by 
(3.4) we get y+ Sz = S(y+z) =Sz,andsoy <Sz. Thusy<2—y< Sz. 
Suppose y = Sa. Then y < Sz by (4.2) and thus rhs(4.4) — ths(4.4). 


Conversely, suppose y < Sz, so that there exists z such that y + z = Sz. 
Then z =0— y = Sz by (3.3), so suppose z # 0. Then SPz = z by (3.7) 
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and so y+ SPz = Sz. By (3.4), S(y+ Pz) = Sz and then y+ Pz = x by 
(3.2), so that y < z. Thus z #0 — y < z, and thus (4.4). 


4.5 Thm r<sy&y<z2z->24<2z, 


Proof. Suppose hyp(4.5). Then there exist u and v such that c+ u = 
y&y+v=z. Thenz=(c£+u)tv=a2+4+ (ut v) by (3.8), and soz < z. 
Thus (4.5). 


4.6 Thm. Pz < z. 


Proof. We have PO < 0 by (3.7) and (4.2), so suppose z # 0. Then 
z= SPr = SPr+0=0+SPzr = S(0 + Pr) = S(Px +0) = Px +SO by 
(3.7), (3.3), (3.11), and (3.4), so that Pz < x. Thus (4.6). 


4.7 Thm r<Syrztr<zty. 


Proof. Suppose z < y. Then there exists u such that r+ u = y. 
Therefore (2+ 2) +u=2+(2+u) = 2+ y by (3.8), and thus (4.7). 


4.8 Thm c<yrorer<az-y. 


Proof. Suppose z < y. Then there exists u such that r+u = y. 
Therefore z-r+z2-u=2-(x+u)=z-y by (3.9), and thus (4.8). 


Chapter 5 


Induction by relativization 


Let C be a unary formula. We use the following abbreviations: 
C! for Vy(y < x — Cly)), 
C? for Vy(C'[y] > C'ly+z]), 
C8 for Vy(C?ly] > Cy -z)). 


Then C!, C?, and C? are unary formulas with free variable z. We will show 
that if C is inductive, then C* is stronger than C, is hereditary, and is not 
only inductive but respects P, +, -, and the defining axiom of <. This 
relativization scheme is due to R. Solovay; see [PD] and {Pu}. 


Metatheorem 5.1 Let T be an extension of Qi (posstbly Q', itself), and 
let C be a unary formula of T. Then the following ts a theorem of T: 
REL. C[0] & Vz(Cjz] - C{Sz]) — 
(C%(z] + C[z]) & 
(C3[z2] &uszr— Cul) & 


(C3[z] + C*|Sz]) & 

(C*[z] > C8[Pz]) & 

(C8[xy] & C3izg] + C821 + 22]) & 

(C3(x,] & C3[x2| + C8|z, - z2]) & 

(C3[z] & Cy] + (x < yo F2(C8[z] & c+ 2=y))). 
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Demonstration. We prove (REL) in T as follows. Suppose hyp(REL). 
Then we claim: 
1, C}[z] > C{z], 
2. Col, 
3. C}]z] + Cl[Sz], 
4, C's] & u< 2 C}[u]; 


C7[c] & u< 2 Cul, 
C? [x4] & C{z2] + C(x, + 29); 


10. C%{z] + C*[z], 

11. CO}, 

12. C¥[z] + C3[Sz], 

13. C%lz] &u<2— Cul, 


14. C8[z,| & C(x] > C3[z, + 22], 
15. C8[x,] & C3{x2] > C¥[xy - ro]. 


Suppose C}[z]. By (4.2) we have C[z], and thus (1). Suppose y < 0. 
Then y = 0 by (4.3), so that Cly] and thus (2}. Suppose C1{z] & y < Sz. 
By (4.4), y <zVy=Sz. Buty < z — Cly], so suppose y = Sz. By (1) 
we have C[z} and so C[Sz], ie. Cly]. Thus Cly], and thus (3). Suppose 
Cia) &u<z& y<u. Then y < z by (4.5), and so Cly]. Thus (4). 

Suppose C”[z]. By (2) we have C'[0+ z], but O+ 2 = z by (3.11) 
and (3.3), so that C'[z], and thus (5). We have (6) by (3.3). Suppose 
C?[z] & C|y]. Then C![y + z], and so C}(S(y + z)] by (3). But S(y +z) = 
y+Sz by (3.4), and so C![y+Sz]. Thus (7). Suppose C?[z] & u < x & C ly}. 
Then y+u < y+z by (4.7), so that C'[y+u] by (4), and thus (8). Suppose 
C? [x4] & C? [x2] & C ly}. By (3.8), y+ (21 +22) = (y+ 21) +22, but we have 
C}ly + a] and therefore C'[(y +21) + x9], ie. C[y + (21 + 22)]. Thus (9). 

Suppose C5{z]. We have C*[SO| by (6) and (7), and hence C?[S0- a]. 
But SO-2 =2-SO=2-04+2=0+2=24+0=2 by (3.12), (3.6), 
(3.5), (3.11), and (3.3), so that C?[z} and thus (10). We have (11) by (3.5) 
and (6). Suppose C%[z] & C?[y]. By (3.6), y-Szr = y-z+y. We have 
Cy - z], so (9) yields C?[y+ z+ yl, ie. C?[y-Sz], and thus (12). Suppose 
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Cz] &@u< 2 & Cy). Then y-u < y-z by (4.8). We have C?[y - xj, so 
C?|y-u] by (8), and thus (13). Suppose C°[z,] & C'jz2] & C?[y]. By (3.9), 
y+ (ti +22) =y- 2) +y+z2. We have C?[y- 21] and C*{y - 29], so by (9) we 
obtain C?[y-21 + y+ 22], i.e. C?[y- (x1 + z2)], and thus (14). Again suppose 
C [x1] & C®[x2} & C?[y|. We have C?[y - x] and therefore C?/(y - x1) - zz]. 
But (y-21) +2 = y-(21-22) by (3.10), so that C?[y-(2;-22)], and thus (15). 

By (10), (5), and (1) we have C%(z] —» Cz]. By (4.6) and (13) we 
have C*[z} + C*[Pz]. Finally, suppose C*jz] & C*ly]. It is trivial that 
Jz(C*[z] & +z =y) + 2 < y, so suppose x < y. Then there exists z such 
that +2 =y. By (3.11), z+z2=y,s0 z < y and by (13) we obtain C4|z]. 
Thus z < y + 32(C%[z| & c+ z=y), and thus C*[z] & C'[y} + (rx < yo 
dz(C*lz] & r+z2=y)). 0 

If we regard the concept of number as being in need of clarification, 
then we can seek to clarify the concept by formalizing it. We can do this, 
for example, by postulating the simple algorithmic properties (3.1)—(3.12), 
adjoining defining axioms, and proving theorems, such as the theorems 
of Q} proved in Chapter 4. But this theory is very weak, and in it we 
can prove very little of what we want to prove about numbers. Let C be 
an inductive formula; our intuitive feeling is that if z is a number, then 
C[z} should hold. Now the formula C* respects all of the function symbols 
of Qi and the defining axiom of <, by REL. All of the other nonlogical 
axioms of Q' are open, so it automatically respects them as well. In other 
words, the entire theory Qj can be relativized by C*. We can replace our 
concept of number (any z) by a more refined concept of number (any r 
such that C3[z]). We can read C*lz] as “z is a number” (leaving open the 
possibility of formalizing an even more refined concept of number at some 
time in the future). We can ask, if x is a number does C[x] hold? Since C* 
is stronger than C by REL, the answer is yes, if ¢ is a number then C(z]. 
This satisfies our intuition. But now we can ask, does the formula C hold 
for numbers? This is a different question. It means: if in C%(z] — C[z] 
we replace the quantifiers Jy in the formula C, which refer to the domain 
of discourse before we refined our concept of number, by 3y(C*[y] & ...), 
which can be read as “there exists a number y such that ...”; in short, if we 
relativize C by C%, is the relativized formula correct? This is the crux. This 
is the point that impredicative arithmetic takes for granted, by postulating 
an affirmative answer in the induction principle. In predicative arithmetic 
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we examine the relativized formula to see whether we can prove it. 

Let us give an example of an inductive formula C for which we can 
indeed prove that C holds for numbers. Consider the first example of 
Chapter 1: Let C be Im SSO-m =n-(n+ SO). Then C is inductive in Q}. 
Consider its relativization by C*: 


C3[n]  Im(C*[m] & SSO-m = n-(n+S0)). 


Suppose C*[n]. Then C[n], by REL, so there exists m such that SSO-m = 
n-(n+S0). Since SSO-m = m+m, we have m < n-(n+5S0). But we have 
C/O], C%[SO], C3[n + $0], C3[n- (n + S0)], and C[ml, all by REL. Thus the 
displayed formula holds. It can be read “if n is a number, then there is a 
number m such that 2-m =n-(n+1)”. 

If now we let C be 


Im(m £0 & Vk(k FO & kK Sn Aj k-j=n)), 


which is the second example of Chapter 1, then C is inductive in Q{ but 
there seems to be no way to prove its relativization by C®. We do not 
have a way of predicating a concept of number such that whenever n is a 
number, there exists a non-zero number m that is divisible by all numbers 
from 1 to n. 


Chapter 6 


Interpretability in Robinson’s 
theory 


For the pleasure of working from minimal assumptions, let us show 
that we can drop the axioms (3.8)-(3.12). We will extend the relativiza- 
tion scheme of the preceding chapter by building into the construction the 
necessary associativity, etc., and then use this to show that Q, is inter- 
pretable in Qo (and so in Robinson’s theory Q). The reader who wishes to 
skip this chapter can simply substitute Q, for Q in later statements about 
interpretability in Q. 

For this chapter, and this chapter only, we make the abbreviations: 


@ for Vz¥y (x+y) +2=2+(y+2), 

Blan Wavy fale 3a Ges o es yea); 

y for Vey (a[z] & Bly| > (z-y)-2=2-{y-2)), 
6 for Vy (O+y=z—7y=2). 


Then the following are theorems of Qo. 
6.1 Thm. a[0}. 
Proof. We have (x+y) +O0=z+yand2+(y+0) = 2+ y by (3.3). 


16 
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6.2 Thm. ajz] > a[Sz]. 


Proof. Suppose (x+y) +2= 2+(y+2z2). Then (cx +y)+Sz = 
S((z+ y) +2) = S(x+ (yt 2)) = 2+S8(ytz) = 2+ (y + Sz) by (3.4). 
Thus (6.2). 


6.3 Thm. al[z] > a[Pz}. 


Proof. Suppose z = 0. Then Pz = 0 by (3.7), and thus z = 0 — (6.3). 
Suppose z #0 & (1+ y)+z=2+ (y+ 2), so that S((z + y) + Pz) = 
(ct+y)+SPz =(c+y)+z2=24+(yt+z) =2+(yt+SPz) = 2+S(y+Pz) = 
S(x + (y + Pz)) by (3.4) and (3.7). Then (2 + y) + Pz = 2+ (y+ Pz) 
by (3.2). Thus z # 0 — (6.3), and so (6.3). 


6.4 Thm. a[z] & a[z_] > a[z, + 22]. 


Proof. Suppose a[z;] & o[z2]. Then (x + y) + (21 + 22) = ((z +y) + 
ee ; (c+ (yt e))+22=2+((yta) +22) = 2+ (yt (a1 +29), and 
thus (6.4). 


6.5 Thm. (0). 


Proof. We have x-(y+0)=az-yandz-y+z-O=a2-y+0=2-y 
by (3.3) and (3.5). 


6.6 Thm. B[z| — 8|Sz}. 


Proof. Suppose a[z] & x-(y+2z) =z-y+z-z. By (3.4) and (3.6), 
z-(y+Sz) = 2-S(yt+z) =a-(ytz)t+e=(r-yto-2z)+2 = 2-yt(z-2+2) = 
r-y+az-Sz. Thus (6.6). 


6.7 Thm. {0}. 
Proof. We have (z-y)-0 =O and z- (y-0) = -0 = 0 by (3.5). 
6.8 Thm. 4[z] > 4|Sz]- 


Proof. Suppose a|z] & Bly] & (z-y)-z = z-(y-z). By (3.6), (z-y)-Sz= 
(z-y)-z+a2-y=a2-(y-z)+2-y=2-(y-z+y) = 2-(y-Sz), and thus (6.8). 


6.9 Thm t+y=0-2r=0&y=0. 


Proof. Suppose z+ y = 0, and suppose y = 0. Then z = 0 by (3.5), 
and thus y = 0 > z = 0, so suppose y # 0. Then S(z + Py) = 0 by (3.4) 
and (3.7), which is impossible by (3.1), and thus y = 0, Thus (6.9). 
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6.10 Thm. 6[0}. 
: Proof. Suppose 0-+ y = 0. Then y = 0 by (6.9), and thus (6.10). 
6.11 Thm. 6|z] + 6[Sz}. 


‘Proof. Suppose é\z] & O+ y = Sz. Suppose y = 0. Then 0 = Sz 
by (3.3), which is absurd by (3.1), and thus y # 0. By (3.7), SPy = y. 
Hence 0 + SPy = Sz, so that S(0 + Py) = Sz by (3.4) and 0+ Py =z 
by (3.2). Since 6/z], we have Py = z, so that SPy = Sz, ie. y = Sz, and 
thus (6.11). 

6.12 Thm. 6(0+ 2]-> r=0+42. 

Proof. Suppose 6[0 + z]. Since 0+ 2 = 0+ 2, we have zx = 0+ 2. 
Thus (6.12). 

Let C be a unary formula. We make the following abbreviations: 


C° for Olz] & alz] & Bla] & >[z] & 6[z], 


C! for vyvz (ytz=2& afz] — Cly)), 
@ for Wy (Cly] + Oly + 2]), 
C8 for Cz] & Vy (C ly] > Cly-a)). 


Metatheorem 6.1 Let T be an extension of Qo and let C be a unary 
formula of T. Then the following is a theorem of T: 
REL. C[0] & Vz(C[z} > C[Sz!) > 
(C[z] > C[z}) & 
C30} & 
(C8[z] + C%Sz)) & 
(6% z| > C*[Pa)) & 
(C3[zy| & CJay| + C8[2, + z9]) & 
(C3[z1] & C3[z_} + C3 (x, - 29]). 


Demonstration. We prove (REL) in T as follows. Suppose hyp(REL). 
We state and prove a number of claims. 

1. C°(0}. This holds by (6.1), (6.5), (6.7), and (6.10). 

2. €%\z) + 6°|Sz], by (6.2), (6.6), (6.8), and (6.11). 
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3. Cz] + 6° [z}]. Suppose C}[z]. It follows from (3.3) and (6.1) that 
z+0= 2 & a0], and consequently C°[z]. Thus (3). 

4. C0]. Suppose y + z = 0. Then y = 0 by (6.9), and so ©°[y] by (1). 
Thus (4). 

5. Oz] + — C'S]. Suppose C'(z] & y+ z= Sz & alz}. We need to 
show C°[y]. Suppose z = 0. Then y = Sz by (3.3). By (3) we have oes 
and from (2) we obtain ©°[Sz], ie. C%ly]. Thus z = 0 > ©°[yl, so suppose 
z #0. Then SPz = z by (3.7), and so S(y+ Pz) =y+SPz=y+z=Sz 
by (3.4). Consequently y + Pz = z, by (3.2). But since a(z] we have a[Pz] 
by (6.3), and since C}[z] we have C°ly|. Thus 2 40 — C°ly], and so Clu}. 
Thus (5). 

6. C[z] & ut+v = 2 & a[v| > C[u]. Suppose hyp (6) & y+2 = u & alg]. 
We need to show C%Fyl. We have (y +z) + v =, and since av] we obtain 
y+(z+v) =z. But alz + v] by (6.4), and since C'[z| we get C°[y]. Thus 
hyp (6) > Clu], ie. (6). 

7. €|z] - €![z]. Suppose C?[z]. We have 6}(0] by (4), so we have 
Clo+z]. Therefore C°(0-+ 2] by (3), and hence 6[0+<]. By (6.12),2=O+z2 
oe so C![z]. Thus (7). 

8. C?(0], by (3.3). 

9. C[z] + C2([sz]. Suppose €?/z] & C}[y]. We need to show C!ly+ Sz]. 
But C'ly +z], and so C'{S(y + x)] by (5). By (3.4) we find C!'y + Sz], and 
thus (9). 

10. C%[z] &utv=2 & alv] — C2[u]. Suppose hyp (10) & C[y]. We 
need to show C}[y + ul]. But (y t+u)+v = y+ (wt) since av], and 
so (y+u)t+v0= =y+z. We have C'ly + gj, since C7{z] & Cy], and we 
have av]. Hence Cy + u] by (6), and thus (10). . 

M1. C?[x] & C? [x2] — C[z, + 22]. Suppose C(x] & 6? [22] & Cllyi. 
We need to show O!(y + (21 + 22)]. But by (7) and (3) we have C°(z9] and 
therefore a(x], so that y + (z1 + 22) = (y +21) +22. We get Oly + 24] 
from C?(z,], and therefore we get C'{(y + z,) + x2] from C(x]. That is, 
Cy + (x; + 22)|. Thus (11). 

12. Cz] — 2/2], by definition. 

13. Co}, by (8) and (3.5). 

14. C*[z] — C Sz]. Suppose lz}. Then €?[Sz] by (12) and (9). 
Suppose Cy}. We need to show C?[y- Sz]. But y-Sz = y-z+y by (3.6), 
and we have Gly - z], so by (11) we get C?[y-2+ y], ie. Cly- Sz]. Thus 
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Cy] Cly- Sz}, and thus (14). 

15. C*{z| — C%Pz]. We have z = 0 — (15) by (3.7), so suppose 
z#0& Cz). First . need to show [Pz]. But Pr + S0 = S(Pr+ 0) = 
SPzx = zx by (3.4), (3.3), and (3.7), and [SO] by (6.1) and (6.2). By (12) 
we have Cz). By aa ) applied to Pz + SO = z we have C?[Pz]. Now 
suppose Cly |. We need to show G?[y- Pa|. But y-Pr+y=y-SPr=y-z 
by (3.6) and (3.7). Since rout [y], we have C°[y] by (7) and (3), and so afy). 
Since C3|z & C*ly], we have C?{y-z]. By (10) applied toy: Prt+y=y-z 
we have G?[y- Pz]. Thus C*(y] + C?ly- Pz], and thus x # 0 — (15). 
Consequently we have (15). 

16. C8 x] & C8/z2] > Cz, + z;]. Suppose hyp(16). Then we have 
C [x4] & O29] by (12), so C?[z, + 22] by (11). Suppose Cilyl- We need 
to show C?[y- (2 + z2)]. By (7) and (3) we have C°[y} and C°[z9], so that 
aly] and B[z2]. Hence y- (z1 +22) = y-21 + y+ tz. We have Cy. z| and 
Cly- zy], so by (11) we have C?ly- xy + y+ 22}, i.e. O?[y+ (x1 + z2)]. Thus 
C°|z, + x2], and thus (16). 

17. Clay] & C|22) = Cz - x2]. Suppose hyp(17). By definition of Cc, 
we have C |x) and, since C29], we have C?[zy- Z2]. Now suppose ly); we 
want to show C4{y-(z,-z2)]. We have C(z2], €°[z,|, and C°[y] by oy c ¥ 
and (3). Therefore [22], B[z,], and aly], so that y- (x; - 22) = (y+ 21) 
From C®|z;] we get C?[y- z,|, and then from 8x9] we get C2[(y - 21) - Pe 
ie. C2ly- (x1; 22)|. Thus Cy] + Oly - (21+ 22)], and thus (17). 

We have ©/z] — C[z] by (12), (7), and (3), so by (13), (14), (15), (16), 
and (17) we have established con(REL). 0 

Whenever we encounter an open formula of Q, that is inductive in one 
of its variables, we can use REL to refine our concept of number and adjoin 
the formula as a new axiom, obtaining an open theory that is interpretable 
in Qo, and the process can be iterated. This observation is expressed in 
greater detail in the following two metatheorems. 


Metatheorem 6.2 Let T be an open extension of Qo with the same lan- 
guage, and let A be an open formula that ts inductive in x in T. Then T/A] 
ts interpretable in T. 


Demonstration. Let C be A;,. Then fo respects each function symbol 


(0, S, P, +, and -) of T, by REL. It respects all of the axioms of T because 
they are open, and it respects A because C® is stronger than Aj, by REL. 
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Consequently, T/A] is interpretable in T via the interpretation associated 

with C3, 
Let Oo be the formal system with the same language, formulas, and 

axioms as Qo, but with an additional rule of inference (open induction): 


OI. If A is open and x occurs in A, infer A from ind, A. 


Metatheorem 6.8 Let B,,...,By be theorems of Qo. Then the theory 
Qo|Bi,-.., Ba] 8 interpretable in Qo. 


Demonstration. Let B be B, & +++ & By, so that B is a theorem of Qo. 
Let Aj,...,A, be the open formulas occurring in the proof in Qo of B that 
are inferred by OJ, in the order of their occurrence, and let x;,...,x, be 
the corresponding variables. Let T, be Qo[A1], let T2 be Qo[A1, Az], ..-, 
and let T, be Qo{Ai,..., Av]. Then 


Fao ind, Ai, Fy, ind,, Aa, see Fry ind, Ay. 


By Metatheorem 6.2 applied v times, T, is interpretable in Qo, Tz is inter- 
pretable in T;, ..., and T, is interpretable in T,_1. By the Interpretation 
Theorem of [Sh,§4.7], T, is interpretable in Qo and, since Bi,...,By, are 
theorems of T,, the theory Qo[Bi,..., Ba] is interpretable in Qo. 


Metatheorem 6.4 Q‘, ts interpretable in Q. 


Demonstration. QI is an extension by definitions of Qi, and Qp is 


equivalent to an extension by definitions of Q, so it suffices to show that 
Q, is interpretable in Qo. To do this it is enough, by Metatheorem 6.3, to 
prove (3.8)—(3.12) in Qo. We do this now. 

We have (3.8) by (6.1), (6.2}, and OI. We have (3.9) by (3.8), (6.5), 
(6.6), and OI. We have (3.10) by (3.8), (3.9), (6.7), (6.8), and OI. 

We claim that 1: 0+ 2 = z.. We have 0+ 0 = 0 by (3.3). Suppose 
0+2=2. Then 0+ Sz = S(0+ 2) = Sz by (3.4), and thus0+z2=2-4 
0+ Sz = Sz. By OI we have (1). We claim that 2: Sy+ax = S(y +2). 
We have Sy + 0 = Sy = S(y +0) by (3.3). Suppose Sy + z = S(y + 2). 
Then Sz + Sy = S(Sy + x) = SS(y + z) = S(y + Sz) by (3.4), and thus 
(2) — (2),[Sz]. By OI we have (2). We claim that (3.11), namely 2+ y = 
yt+a. We have r+ 0=0+ 2 by (3.3) and (1). Suppose r+y = y+ 2. By 
(2) and (3.4) we obtain Sy + z = S(y + x) = S(x + y) = 2 + Sy, and thus 
(3.11) — (3.11),(Sy]. By OI we have (3.11). 
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We claim that 3: 0-2 = 0. We have 0-0 = 0 by (3.5). Suppose 0-z = 0. 
Then 0-Sz = 0-z+0 = 0-x = 0 by (3.6) and (3.3), and thus (3) — (3),[Sz]. 
By OI we have (3). We claim that 4: Sz-y=2-y+y. We have Sr-0=0 
by (3.5) and z-0+0 = 2-0 = 0 by (3.3) and (3.5), so that Sz-0 = -0+0. 
Suppose Sz-y = z-y+y. Then by (3.6), (3.8), (3.4), and (3.11) we obtain 
Sx-Sy =Sz-y+S2 = (z-y+y)+Sr=2z-y+(y+Sz) =2-y+S(y+z) = 
g-ytS(r+y)=2-y+ (c+ Sy) = (e@-y+2z)+Sy=2-Sy+ Sy. Thus 
(4) — (4),[Sy]. By OI we have (4). Finally, we claim that (3.12), namely 
z-y=y-az. We have 0-y = y-0 by (3) and (3.5). Suppose z-y = y-z. By 
(4) and (3.6), Sz-y = z-yt+y =y-r+y = y-Sz. Thus (3.12) — (3.12),[Sz]. 
By OJ] we have (3.12). 


Chapter 7 


Bounded induction 


In this chapter we define the notion of bounded formulas and show that 
induction can be used on them. 

The initial occurrence of 4x in a part 4xB of A is called manifestly 
bounded in case B is of the form x < a & C where a is a term not contain- 
ing x. The formula A is called manifestly bounded in case each occurrence 
of an existential quantifier in A is manifestly bounded. (Recall that inside 
each universal quantifier there lurks an existential quantifier.) Formulas 
are built up from atomic formulas by means of ~, V, and existential quan- 
tifiers 3x (see [Sh,§2.4]). In the same way, manifestly bounded formulas are 
built up from atomic formulas by means of =, V, and manifestly bounded 
occurrences of existential quantifiers 4x. 


Metatheorem 7.1 Let T be a theory containing the binary predicate sym- 
bol <, and let C be a unary formula of an extension U of T that respects 
all function symbols of T and ts hereditary. Let A be a mantfestly bounded 
formula of T. Then : ; 


Fy C(free A) + (A Ac). 


Demonstration. For the purposes of this demonstration, call a formula B 
good in case it is a formula of T and Fy C(freeB) -+ (B > Bc). Atomic 
formulas of T are good. Suppose B is good. Since C(free —B) is C(freeB) 
and (—B)c¢ is -(Bc), the formula —B is good. Thus 1: if B is good then -B 
is good. Suppose B, and By are good. Since 
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C( free (By V Bz)) > C(freeB,) & C(free Bz) 


is a tautology or the empty expression, and since (B; VB2)c is Bic V Bac, we 
have that B, VB, is good. Thus 2: if B, and Bz are good then B, VB; is good. 
Suppose D is good and B is 4x(x < a & D) and a does not contain x. Then 
every variable in a occurs free in B, and since C respects every function 
symbol of T we have ty C(free B) — Cla]. Since C is hereditary, 


Fy C(free B) — (Ax(x <a & D) © Ax(C[x} &x <a& D)). 


Since D is good and C(free B) & C[x] — C(free D) is a tautology (unless D 
is closed, in which case the question does not arise), 
Fy C(free B) > (Ax(x <a & D) + Ax(C[x] & x <a & De)), 

which is ty C(free B) + (B — Bc). Thus 3: if D is good and a does not 
contain x then Jx(x <a & D) is good. Starting from the atomic formulas 
in A and applying. (1), (2), and (3) to each occurrence of >, V, or J in A, 
we find that A is good. 

Metatheorem 7.2 Let A be a manifestly bounded formula of Q', that is 
inductive in one of its free vartables x. Then Q}|A] ts interpretable in Q4. 

Demonstration. Let C be Ajx. By REL, C® respects all function sym- 
bols and nonlogical axioms of Q}. Since C® is stronger than A/, by REL, 
we have Fg C3(free A) — A. Since C3 is hereditary by REL, C* respects A 
by Metatheorem 7.1. Therefore Q{/A] is interpretable in Qj via the inter- 
pretation associated with C*. O 


We construct a theory Qo, which is an extension of Q) with the same 
language, by adjoining as new nonlogical axioms all formulas of the form 


MBI. A,[0] & ~3z(z < y & 7A,|Sz}|) > (« <y — A) 
where A is a manifestly bounded formula in the language of Q and y does 
not occur free in A. 
Metatheorem 7.3 Let By,...,By be theorems of Qz. Then Q4jBy,...,By] 
is interpretable in Q\. : 


Demonstration. Each of the new nonlogical axioms (MBI) is manifestly 
bounded. We claim that each (MBI) is inductive in y in Q{. To see this, 
we argue in Q} as follows. 
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Since z < 0 > g = O by (4.3), we have A,[0] > (z < 0 > A), 
and therefore (MBI),(0]. Suppose (MBI) & hyp(MBI), [Sy]. Observe that 
hyp (MBI), |Sy] -+ hyp (MBI) since, by (4.4), z < y— & < Sy. Therefore 
we have hyp(MBI), and since we have (MBI) we also have con (MBI), 
namely 1: 2 < y— A. We need to show that 2: x < Sy — A. But by (4.4), 
r<Sy>a<yVa= Sy. By (1) we have c < y — (2), sosuppose z = Sy. 
Since hyp (MBI), we have—rewriting it in a more civilized notation— 


A,|0] & Ve(x < y & A > A,[Sz)). 


But y < y by (4.2), so Az[y] > Az[Sy]. Also because y < y, we have Az|y] 
by (1). Hence A,[Sy}, ie. A, and thus (2). Thus (MBI) - (MBI),/[Sy], and 
therefore ind, (MBI). 

Since each (MBI) is manifestly bounded and inductive in y in Q4, the 
conjunction B of all axioms of the form (MBI) occurring in the proofs 
in Q2 of B;,..., Ba is also manifestly bounded and inductive in y in Q}. By 
Metatheorem 7.2, Qj|B] is interpretable in Q,. But By,...,B, are theorems 
of Q{[B|, so by the Interpretation Theorem of [Sh,§4.7}, Q)[Bi,...,Ba] is 
interpretable in Qi. O 

We will say that a theory T’ is locally interpretable in a theory T in case 
whenever B,,...,B, are theorems of T’, then the theory whose nonlogical 
axioms are B,,...,B) (and whose nonlogical symbols are those occurring 
in B,,...,By) is interpretable in T. By Metatheorems 7.3 and 6.4, the 
theory Q2 is locally interpretable in Q. I promised in Chapter 3 that we 
would work only in theories interpretable in Q; since only finitely many 
axioms of Q, will ever be used in this investigation, that promise will be 
kept so Jong as we work in Q, or extensions by definition of Q2. Moreover, 
Pudlak sketches a proof of the result that Q2 is globally interpretable in Q 
(Theorem 2.7 of [Pu], attributed to A. Wilkie). It would be awkward 
always to write formulas in manifestly bounded form. For example, neither 
Va(r < y ~ & < z) nor Jrdy(e < z& y < z& c # y) is manifestly 
bounded, though they are respectively equivalent to the manifestly bounded 
formulas ~J2(z < y & 7@ < 2) and Iz(z << z & Syly<z2& rH y)). We 
use 


A:xy <ay,....Xy Say 


as an abbreviation for A «+ A’, where A’ is the formula obtained by replac- 
ing each part of A of the form 4x,B by Jx,(x, <a, & B), for all « from 
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1 tov. Let T be a theory containing <, let A be a formula of T, and 
let x1,.-.,x, be the variables that occur bound in A. We say that A is of 
bounded form (or of bounded form in T) in case there are terms ai,...,a, 
such that for all » from 1 to v, the variable x, does not occur in a,, and 
bey Asx) <aj,...,X» <a,. Then the formula A' defined as above is mani- 
festly bounded, and A is equivalent to A‘ in T. An extension T' of T is called 
a bounded extension of T in case it is an extension by definitions of T such 
that for each defining axiom px;...x, «+ D of a predicate symbol, D is of 
bounded form, and for each defining axiom fx,...x, = y «> D of a function 
symbol, JyD is of bounded form. A nonlogical symbol, term, or formula 
of an extension U of T is called bounded over T in case it is a nonlogical 
symbol, term, or formula of bounded form of a bounded extension T’ of T 
(such that U is an extension of 1’). 

Let T be a theory containing <, 0, and S. We say that T is a bounded 
theory in case for every formula A of bounded form in T, tr tnd, A — A. 


Metatheorem 7.4 Q2 1s a bounded theory. 


Demonstration. Let A be a formula of bounded form in Q,, so that it 
is equivalent to the manifestly bounded formula A‘. Then we argue in Qz 
as follows. 

Suppose ind, A’; that is, A{0) & Vx(A' — Aj{Sx}). Then 


AXIO] & -3x(x <y & A’ & Aj [Sxl). 


Here y is a variable distinct from x and all variables occurring in A’. 
By (MBI) we have x <y — A’. Therefore x < x — A’, and so A’ by (4.2). 
Thus ind, A’ — A‘, and so ind, A > A. 


Metatheorem 7.5 Let T be a bounded theory and let T’ be a bounded 
extension of T. Then T' ts a bounded theory. 


Demonstration. Suppose first that T' is obtained by adjoining a single 
symbol, and let A be a formula of bounded form in T’. Then the translation 
A* of A into T (see [Sh,§4.6}) is a formula of bounded form in T, so that 
te ind, A* > A*. But by A* © A, and so Fy: ind, A — A. Thus the 
result holds in this case. To obtain the result in general, apply this result 
step by step to each new nonlogical symbol. 0 

It might appear simpler to argue in the general case directly, by consid- 
ering the translation A* into T. But our metamathematical arguments are 
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intended to apply to actual formulas that one writes down. The metathe- 
orems are intended to be correct statements about what one can actually 
do, and the demonstrations are intended to show how to actually carry out 
the constructions they assert to exist. With even a rather modest exten- 
sion by definitions T’ of T, if we try to construct the translation A* of a 
formula A of T’ all the way into T, we may find ourselves in the plight 
of the legendary caliph who promised to give one grain of wheat for the 
first square of a chessboard and to double the number for each successive 
square. 


Metatheorem 7.6 Let U be an extension of Q2 and let A be a formula 
of U that ts bounded over Qo. Then 


BI. ind, A > A 


1s a theorem of U. 


Demonstration. By Metatheorems 7.4 and 7.5. 
We refer to BI as bounded induction. 


Metatheorem 7.7 Let T be a theory containing < and 0, let T’ be a 
bounded extension of T, and let U be an extension of T'. Let C be a unary 
formula of U that is hereditary and respects each nonlogical aziom and 
function symbol of T. Then C respects each nonlogical aziom and function 
symbol of T'. 


Demonstration. Suppose first that T’ is obtained from T by adjoin- 
ing the new predicate symbol p with defining axiom px,...x, <> D, where 
D is a formula of bounded form in T. Then D is equivalent to the mani- 
festly bounded formula D’ of T; we may assume that D' contains no free 
variables other than x;,...,x,, for if it did, we could substitute 0 for 
them. By Metatheorem 7.1, C respects px,...x, «+ D’, and so C respects 
px,...x, «+ D. Thus the result holds in this case. 

Suppose next that T’ is obtained from T by adjoining the new function 
symbol f with defining axiom fx, ...x, = y < D, where jyD is a formula of 
bounded form in T. Then D is also a formula of bounded form in T, and so is 
equivalent to the manifestly bounded formula D' of T; we may assume that 
D' contains no free variables other than x,,...,x,,y- By Metatheorem 7.1, 
C respects fx,;...x, = y « D’, and so C respects fx,...x, =y @ D. Now 
dyD is equivalent to a formula Jy(y < a & Do), where a is a term of T 
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not containing y; we may assume that a contains no variables other than 
X1,-..,X,. By the uniqueness condition, 

fxy...x,=yrry <a Do. 
But since C respects each function syfnbol of T, we have 

Fy C[xy] > +++ 4 Clx,] — Cfal, 


and since C is hereditary it respects f. Thus the result holds in this case. 
To obtain the result in general, apply these results step by step to each 
new nonlogical symbol. 


Chapter 8 


The bounded least number 
principle 


The least number principle is a form of the induction principle that is 
useful in many proofs. Used indirectly, it is equivalent to proof by infinite 
descent or complete induction. Here we formulate a predicative version of 
the least number principle. 

For a formula A and variables x;,...,x,, let yi,...,y, be in alphabetical 
order the first v variables not occurring in A and distinct from x),...,Xv; 
then we write 


minx, x A 
for 


A & ~3y,..-5y yi cu & = & y, <x & 
(y1 ~#x1V set V Yn #X,) & Ags xv [Yt +++ ¥v])- 


Metatheorem 8.1 Let U be an extension of Qz and let A be a formula 
of U that ts bounded over Qz. Then 


BLNP. 3x; --- Sx, A 3x)--- dx, minx, x, A 


is a theorem of U. 


Demonstration. Consider first the case that v is 1. We use the abbre- 
viations 


29 


30 8. THE BOUNDED LEAST NUMBER PRINCIPLE 


a for Ix;(x1;<z& A), 
B for Ixy(x%1 < z & min,, A), 


where 2z is a variable distinct from x, and y, that does not occur in A. Then 
we argue in U as follows. We claim that 1: a — 8. Suppose a,|0|. Then 
there exists x; such that x, < 0 & A. By (4.3), x; = Oand so min,, A. Thus 
{1),|0]. By (4.2) and (4.5) we have 2: 8 — 6,[Sz]. Suppose a,/Sz], so that 
there exists x; such that x, < Sz & A. By (4.4), x, <zV x, = Sz. We have 
xX, <z— a. Suppose 7a. Then x; = Sz. Suppose —(min,,A)x, [Sz]. Then 
there exists y, such that yi < Sz & y, # Sz & Ax,|y1|. By (4.4), y1 <2, so 
that a, a contradiction. Thus (minx, A)x, {Sz}. By (4.2), Sz < Sz, and thus 
a —» §,(Sz]. Thus 3: a,[Szj > a V §,!Sz]. By (2) and (3), 


(a — 8) & a,'Sz] > 6,[Sz2l, 


so that (1) — (1),[Sz]. By BI we have (1). Consequently a,[x,] > 8,[x1], 
but since x1 <x, by (4.2), we have 3x,A — Jx;min,,A. This proves the 
result when v is 1. 

Now consider the general case. Let z),...,z, be distinct, be distinct 
from X),...,Xy,¥1,---,Yv, and not occur in A. We argue in U as follows. 
Suppose hyp(BLNP). Then there exist z;,...,2, such that Ay, x,[Z1.-.2Z,]- 
Write 


y for x <4 & - &x, Sa&A. 
By (4.2), Yx,..x,|21-.-2.]. By the result when v is 1, applied v times, 


there exists x, such that minx, Ix2--+ Sx, 7, 


there exists x2 such that min,, 3x3 --- 4x, 7, 


there exists x, such that min,, y. 


Suppose -min,,_x,A. Since 7, we have A, so there exist yy,...,y, such 
that 
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ysm& = &y <x & (yi Amv: Vy, Fx) & 
Axy,..x. LV tee Yu). 


For some » with 1 < uw < v we have y, # z,, but this contradicts 
minx, 3X,41°°:3x,. Thus miny,..x,A, and thus (BLNP). 

We will write “3x,---4x,A. By BLNP there exist minimal such x, ..., 
and x,” for “dx,---dx,A. By BLNP there exist x1, ..., and x, such that 
min,,..x,A” (with the appropriate change in grammar or punctuation when 
vy is 1 or 2). 


Chapter 9 


The Euclidean algorithm 


Until further notice we will work in bounded extensions of Q,. At one 
point in the proof of REL we quoted five axioms to show that one times r 
equals z. This sort of thing might become tiresome if continued much 
longer, so let’s stop doing it. The development picks up from where we left 
off at the end of Chapter 4, but now we have BJ and BLNP available. 

9.1 Thm. 2+ y = 29+ y 9 2 = 2. 

Proof. Clearly (9.1),{0}. Suppose (9.1) & 2: + Sy = 2, + Sy. Then 
2, +y = 22+ y and so z; = 2. Thus ind, (9.1), so by BI we have (9.1). 
9.2 Def. r-yozr2zt+y =x, otherwise z= 0. 

The uniqueness condition holds by (9.1). We have Jz rhs (9.2):z < x, 
so (9.2) is the defining axiom of a bounded function symbol. Put less 
formally. this function symbol! is bounded because we do not need to search 
through all numbers to see whether there is a 2 with z+ y = z, but only 
through all numbers < rz. 

9.3 Thm. yAO0&z-y=0>2z=0. 

Proof. Supposey #O0& z-y=0&z #0. Then z = SPz,soSPz-y =0, 
Pz-y+y=0, and y = 0, which is a contradiction. Thus (9.3). 

9.4 Thm. yAOk yy = 2% y 9 2% = 2p. 

Proof. Suppose 3z,422—(9.4). By BLNP there exist minimal such 2 
and z,. Of course, ~(9.4) + hyp(9.4), so we have hyp(9.4). By (9.3), 
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z, # Oand z, # 0. Hence SPz,-y = SPz,-y, Pa-yty = Pze-yt+y, 
and Pz,y = Pz,-+y by (9.1). By the minimality assumption, Pz, = Pzp. 
Therefore SPz, = SPz; and we have z, = z;, a contradiction. Thus (9.4). 


9.5 Thm. y#O SM z< zy. 


Proof. Suppose y # 0. Then z-y = z-SPy=2z-Py+z,soz<z-y. 
Thus (9.5). 

9.6 Def. r/y=zcz-y=2 & y £0, otherwise z = 0. 

The uniqueness condition holds by (9.4), and we have Jzrhs (9.6): z < x 
by (9.5). 

9.7 Thm r<yvy<e. 

Proof. We have (9.7)z|0] since 0 < y by (4.2). Suppose y < x. Then 
there exists z such that y+ z2=2,so0y+5z = Sz. Thusy<2—- y < 52. 
By (4.2), y= 2— y < Sz, so suppose zt < y & c #y. Then there exists z 
such that r+-z=y & z #4 0,so that c+SPz = y, 8r4 Pz =y, and Sz < y. 
Thus ind, (9.7), so (9.7) by BI. 

9.8 Thm cs y&y<ar-rH=y. 

Proof. Suppose zr < y & y < x. Then there exist w and z such that 
t+w=yk&yt+z2=2. Hencer+(w+z) =2+0, and w+ z=0 by (9.1). 
Consequently w < 0, so w = 0 and z= y. Thus (9.8). 

9.9 Def. Max(z,y)= ze (r<ykz=y)Viy<rk&z=2). 

The existence condition holds by (9.7), the uniqueness condition holds 
by (9.8), and we have 3zrhs(9.9):z < zy. 

By the way, a nonlogical symbol beginning with a capital letter will 
always be a function symbol (and conversely if the symbol begins with a 
letter). 


910 Def. c<yor<yk&srFy. 


9.11 Thm yFORrHzy nen&n<ye&r=zaygninknn<yo 
H=@ &r=72. 

Proof. Suppose hyp (9.11) and suppose q, < gz. There exists w such 
that@ =qatwkw 0. Theny-qtn=rz=y qty: wr, so 
ry=y-w+re. By (9.5), y < y-w <1, which contradicts ri < y by (9.8). 
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Thus -~(q, < gz), and similarly ~(g_ < q,), so that g: = g2 by (9.7). By (9.1), 
ry = 12. Thus (9.11). 


9.12 Thm. y #0 Sgar(c=y-qtr&r<y). 


Proof. We have (9.12):¢ < 2,7 < y. SinceO = y-04+08& (y#0—- 
0 < y), we have (9.12),/0]. Suppose tz = y-q+r&r<y. There exists w 
such thatr+w=y&w+0,sor+SPw =y, Sr+ Pw =y, and Sr < y; 
that is, Sr << yVSr=y. Then Sr <y ~ Sr =y-qt+r&Sr< y, and 
Sr=y > Sr=y-Sq+0& 0< y. Thus ind, (9.12), so (9.12) by BI. 


9.13 Def. Qt(y,z) =qe3r(e=y-qtr&r<y)Vv(y=0& q=0). 


The uniqueness condition holds by (9.11), the existence condition holds 
by (9.12), and we have Agrhs (9.13):¢ < z,7 < y, and similarly for the next 
defining axiom. 


9.14 Def. Rm(y,z) =r de(tz=y-qtr&r<y)Vv(y=0k&r=0). 
9.15 Def. 1 = SO. 

9.16 Def. 2=S1. 

9.17 Def. 3 = $2. 

9.18 Def. 4 = $3. 

9.19 Def. 5 = S4. 

9.20 Def. 6 = 85. 

9.21 Def. 7 = 86. 

9.22 Def. 8 = 87. 

9.23 Def. 9 = S8. 

9.24 Def. Dec(z,y) = z-S9+ y. 


The constants 0, 1, 2, 3, 4. 5, 6, 7, 8, and 9 are called decimal digits. If 
€1,€2,...,@,-1,e, are decimal digits, v is at least 2, and e; is not 0, then we 
write ejeg...e,-1e, for Dec(Dec{...Dec(ei,e2}...e,-1},e,). A term that 
is of this form or is a decimal digit is called a decimal. If e, and ey are 
decimal digits, one can find decimals a and b such that + e; + e2 =a and 
- @;-e€2 = b. The two hundred theorems of this form can conveniently be 
tabulated as addition and multiplication tables; if decimals e,...¢e, and 
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e|...e, are given, these tables make it easy to find decimals c and d such 
that F e;...e, + e,...e, =c and e;...e,-e...e,=d. 


9.25 Def. r|yodz2-z=y. 
We have rhs (9.25): z < y. 
9.26 Thm. z|y&yfOrK<y. 


Proof. Suppose hyp (9.26). There exists z such that x-z = y. Then 
z#0,soz< y by (9.5). Thus (9.26). 


9.27 Thm. a=b+c&rlak&rlboxzle. 


Proof. Suppose hyp (9.27). There exist u and v such that z-u = 
a&zr-v=b,soz-u=2-v+c. Suppose z= 0. Thence =0=0-0 and 
thus r = 0 > z|c. Suppose z # 0. Then uv < uz, so there exists w such 
thatv+w=u. Thent-v+z-w=2-u,sox-w=c by (9.1). Thus z|c 
and thus (9.27). 


9.28 Def. pis a prime + p#1& Vze(r|p>z=1Vr=p). 


We have p # 0 > rhs (9.28):2 <p. Also, 2/0&241&2+#0,s0 

p =0-— rhs (9.28):2 < 2. Consequently we have rhs (9.28): z < Max(p, 2}. 

: We will frequently introduce predicate symbols containing words, but 

we use these predicate symbols formally. For example, “~(0 is a prime)” is 

a theorem, but “O is not a prime” is not even a formula. If *«* is obtained 

by forming the plural of a noun in —, then we write (omitting the comma 
if v is 2) “ay,..., and a, are ***” for “a,isa— & --- & a,yisa—”. 


9.29 Thm. pisa prime & pia-b— pjavp|b. 


Proof. Suppose pis a prime & p|a-b& —(p|a). By (9.12) there 
exist g and r such that a = p-g+r &r<p. Also,0 <r since —(p| a). We 
have a:b = p-q-b+1-b, so p|r-b by (9.27). By BLNP there exists ro 
such that min,,(0 < ro < p & p|7o-b). There exist g; and 7 such that 
P=To(QMtm & <r. Since p-b =19-q,-b+7,-6 we have p| 7, - 6. 
By the minimality assumption, r; = 0. Hence p = ry: q, and rq | p. Since 
ro < pand p is a prime, ro = 1. Therefore p | b, and thus (9.29). 


Chapter 10 


Encoding : 


In the last chapter we copied the usual proofs, observing that only 
bounded inductions are involved. But now we come to a fork in the road. 
Arithmetic is too limited unless it can express notions such as finite sums 
and products, exponentiation, etc. The usual semi-formal treatment of such 
notions is based on a pun on the word “number”, confounding the formal 
notion of number as a term of a theory with the genetic notion of number 
used in counting. For example, when one writes 


Lif) = (1) ++ fn), 


one is trying simultaneously to use n as a term of a theory and to speak of 
n terms of that theory. Géddel overcame this difficulty by finding a way to 
represent recursive functions within Peano Arithmetic. The first require- 
ment is for a means of encoding a finite set of numbers by a single num- 
ber. Gédel does this by means of his beta function (see [G6} or [Sh,§6.4!). 
This method is impredicative; in fact, it relies precisely on the induction 
giving a(n) discussed in the second example of Chapter 1. Mostowski, 
Robinson, and Tarski showed (see [MRT,pp.56~59]) that recursive func- 
tions are representable in Q, but this does not meet our needs for two rea- 
sons: first, the methods are impredicative (theirs is a result about Q proved 
in a stronger theory) and second, recursive functions are represented only 
extensionally in Q, whereas we desire, where possible, an intensional repre- 
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sentation (see {Fe]) allowing us to prove properties of the functions within 
the theory. Therefore we will seek a different route. 

The encoding method that we will use is this: take a number a, write 
it in base four notation, and consider the set of all numbers whose base 
two representation occurs in the base four representation of a immediately 
preceded and followed by the base four digit 2; then we regard a as encoding 
this finite set of numbers. For example, the number a whose base four 
representation is 202112 (i.e., 2198 in decimal notation) encodes the pair 
of numbers whose base two representations are 0 and 11 {i-e., 0 and 3 in 
decimal] notation). We need to show that this encoding can be expressed 
within our theory. This is not immediately clear; for example, one can 
speak of the first, second, or third binary digit of a number (counting from 
the right), but how can one speak of its k** binary digit? We will get around 
this problem by speaking instead of the binary digit in the g’s place, where q 
is a power of two. é 


10.1 Def. q is a power of two © Vp(p is a prime & p|q — p= 2). 

We have q # 0 — rhs(10.1):p < q. Also, 3is a prime & 310 & 3 #2, 
so that rhs (10.1): p< Max(q.3). 
10.2 Def. q is a power of four <> q is a power of two & Sr r-r=q. 

We have rhs (10.2):r <q. Let us agree to stop giving bounds on for- 
mulas when they are obvious. 


10.3 Def. power(b,qg)  (b = 2 & g is a power of two) V(b=4 & qisa 
power of four). 


10.4 Thm. power(b, qi) & power(b,qz) — power(b, q1 - g2). 


Proof. Suppose hyp (10.4), so that b = 2 Vv b = 4, and suppose p is a 
prime & p | 91-42. By (9.29), p| qi Vp | q2. But q; arid gz are powers of two, 
so p = 2. Thus q;- 2 is a power of two, and therefore 6 = 2 > con (10.2). 
Suppose 6 = 4. Then there exist r; and rg such that ry-17) = q, & re-r2 = Ge, 
so (71 -r2)- (ri -72) = 41° G2 and thus 6 = 4 — con (10.4). Thus (10.4). 


10.5 Thm. power(b,q) & ¢ # 1 — power(b, q/b). 


Proof. Suppose hyp (10.5) and observe that —(0 is a power of two), so 
that 1 <q & q|4q,so0 by BLNP there exists p such that min, (1 < p & p|q)}. 
Suppose x |p. Then z | qg, so by the minimality of p we have x = 1V z = p. 
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Thus p is a prime, and p| gq, so p = 2. That is, 2| q, so that g = (q/2) -2. 
Suppose y is a prime & y | (g/2). Then y| 9, so y = 2. Thus q/2 isa 
power of two, and consequently 6 = 2 — con (10.5). Suppose 6 = 4. Then 
there exists r such that r-r = q. Since 2 is a prime and 2 | q, we have 
2(r by (9.29), so 4: (r/2) -(r/2) = q. Hence 4 | g, and (r/2) - (r/2) = 9/4. 
Suppose z is a prime & z | (q/4). Then z | q,so z= 2. Thus q/4 is a 
power of four, and thus b = 4 — con (10.5). Thus (10.5). 


10.6 Thm. power(b,g:) & power(b, g2) & q1 < ¢2 — power(b, q2/41). 


Proof. Suppose 3q,492—(10.6). By BLNP there exist minimal such 
qa and q. Then qi # 1. By (10.5), power(b, q:/6), so by the minimality 
assumption we have power(b, q2/(q:/b)). That is, power(b, (gz -b)/g:). Since 
gi < G2, we have (q2 -6)/q, #1. By (10.5) again, power(d, ((q2 - b)/q1)/0)- 
That is, power(b, 92/q.), which is a contradiction. Thus (10.6). 

10.7 Thm. power(b,qi) & gq. <2 <q -6 & power(b, q2) & << o< qb 
% = 42. 

Proof. Suppose hyp (10.7) & qi < gz. We have gz < gi - 6, 50 q2/qi <b 
and —(8| (¢2/¢1)). By (10.5), g2/q: = 1, 50 41 = 2. Thus q) < 92 -» (10.7), 
and therefore q2 < q, ~+ (10.7), so that (10.7). 

10.8 Def. |x|, = ¢ ++ power(b,q) &e #0 & ¢<2< q-b, otherwise q=1. 

The formulas in what follows will be easier to read if we bear in mind 
that, for a base 6 and q a power of b, the base b representation of z is 
that of Qt(g,z) down to and including the q’s place, followed by that of 
Rm(g,z). Using these scissors we can snip out any desired portion of the 
representation of x. For example, the base 6 digit in the q’s place of zx is 
Rm(6, Qt(q, z)). It is intuitive that repeated snipping does not change the 
value of any digit (though perhaps its location may change}, and the next 
theorem is a result of this sort. 


10.9 Thm. power(b,q1) & power(b, q2) & qi < gz > Rm(6, Qt(q, z)) = 
Rm(6, Qt(q, Rm(¢2, z))). 


Proof. Suppose hyp (10.9). We claim that 
1. z= Qt(q2,2) +92 + Rm(q, 2), 
2. Rm(g2, x) = Qt(q, Rm(q2,2)) - 91 + Rm(q, Rm(q2, 2), 
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3.2 = Qt(a,z)-a + Rm(q,2), 

4. z= (Qt(g2, x) - (a2/q) + Qt(qi, Rm(qz2,x))) - a + Rm(q, Rm(q2, z)), 

5. Qt(q:,z) = Qt(q2,z) - (g2/a1) + Qt(g1, Rm(g2, 2). 

We have (1), (2), and (3) directly from the defining axioms for Qt and Rm, 
(4) is a consequence of (1) and (2), and (5) is a consequence of (3) and (4). 
But 4g < 2, so 6 | (q2/qi) and (5) gives con (10.9). Thus (10.9). O 

The next two theorems show that the first significant digit of z occurs 
in the |zj,’s place. 

10.10 Thm. power(b,q) & |x|, <q — Rm(b, Qt(g,z)) = 0. 

Proof. Suppose hyp(10.10). Then z < g, so Qt(q,z) = 0 and therefore 
Rm(b, Qt(q,z)) = 0. Thus (10.10). 

10.11 Thm. tc #08& (6 = 2Vb = 4) > O < Rm(b,Qt(|zh,z)) = 
Qt({zj,,2) <6. 

Proof. Suppose hyp (10.11). Then |z|; < x < |z|,-b, so that we have 
0 < Qt(\z)s,z) < 6, and hence con (10.11). Thus (10.11). 

Next we show that two numbers with the same base 4 representation 
are equal. We do this by the method of infinite descent (predicatively}, 
snipping off the first significant digit to get a pair of smaller numbers with 
the same base 6 representation. 

10.12 Thm. (b = 2V 6b = 4) & Vo{power(b,qg) —- Rm(b, Qt(¢,21)} = 
Rm(b, Qt(q1, 22))) > 21 = 22. 

Proof. We have (10.12):¢ < Max(|z;|s,!z2{,) by (10.10). Suppose 
zy Jz2~(10.12). By BLNP there exist minimal such z, and zz. Suppose 
z, = 0. Then Rm(b, Qt{|z2)\.,22)) = 0, so zp = O by (10.11). Hence x = 22, 
a contradiction, and thus xz, 4 0. Similarly, z2 # 0. By (10.10) and (10.11), 
jily = |z2|,. Let go = |zsJs, let y. = Rm(qo, 21), and let ys = Rm(qo, 22). 
Then y, < x, and yp < 2, and 


£1 = Qt(go, 1) -Go + Ms 
Zz = Qt(go, 22) +40 + yo 


We have Rm(b, Qt(go, 21)) = Rm(b, Qt(qo, Z2)), so by (10.11) we obtain 
Qt(g0,21) = Qt(go,22). Since z; # x, we have y, # yz. We use the 
abbreviation 


40 10. ENCODING 


@ for scopey,(10.12).,2,[¥1y2]- 


By (10.10), go < ¢ — @ and by (10.9), g < qo — a. Therefore Vq a, which 
contradicts the minimality assumption. Thus (10.12). 

The q- q’s place in base four corresponds to the q’s place in base two. 
Next we show that for any number z there is a number z whose base four 
tepresentation is the same as the base two representation of z. ; 


10.13 Thm. 32Vq(q is a power of two > 
Rm(2, Qt(q, z)) = Rm(4, Qt(q "q, 2))). 

Proof. We have (10.13):z < |z|2- |zl2-4,q < |zl2 by (10.10). Suppose 
Jdx-(10.13). By BLNP there exists a minimal such z. Suppose x = 0 
and let z = 0. Then (10.13), a contradiction, and thus x # 0. Let y = 
Rm({zl2,z), so that y < z. By the minimality of x, there exists w such that 


Yq(qg is a power of two + Rm(2, Qt(q,y)) = Rm(4, Qt(q- 4, w))). 


Let z = |z|2-|z|2+w, and write a for scopey,(10.13). By (10.9), q < |r|, > a 
and by (10.10), |z|z2 <q — a. By (10.11) we have 0 < Qt(|z[2,2) < 2, so 
Rm(2, Qt(|z|2,z)) = 1. But Qt([z|2,y) = 0, so 


Rm(4, Qt(|z/2- |z|/2,w)) = Rm(2, Qt(|z|2,y)) = 9. 
Hence Rm(4, Qt(/z|2 + |z|2,z)) = 1, so that g¢ = |z|z > a. Consequently 
Vqa, and so (10.13), a contradiction. Thus (10.13). 
10.14 Def. Encz = z « Vgq(q is a power of two > Rm(2,Qt(q,2)) = 
Rm(4, Qt(q- 4, 2))). 

The uniqueness condition follows from (10.12), the existence condition 
is (10.13), and we have Jzrhs (10.14): z < |zl2-|zl2-4,¢ < |zl2. This is the 
function symbol that we need for encoding. 

10.15 Thm. Enc z, = Enc 22 -+ 2) = 2. 

Proof. By (10.12). 


10.16 Def. enc(q:,¢2,2,4) «+ gq, and q2 are powers of four & 
Rm(4, Qt(q,@)) = Rm(4,Qt(q@,a)) =2 & g2=4-|Enca|y-4-q1 & 
Rm(q@2/(91 - 4), Qt(q1 -4,@)) = Encz. 


10.17 Def. 2 € a <> 4qy5q2 enc(q, 92, 2,4). 
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We have rhs (10.17):q) < a,q2 < a. 

We need another scissors lemma, to verify that if two different numbers 
xz and y are encoded in a, then they are encoded in a non-overlapping way. 
This is used to prove that if r is encoded in a, then there is a 6, smaller by 
at least a factor of 2, such that every other number encoded in a is encoded 
in 6. 


10.18 Thm. power(b,q,) & power(b,q) & power(b,q) & q <9 <q: > 
Rm(6, Qt(¢/a1, Rm(q2, Qt(q,@)))) = Rm(b, Qt(q, a)). 

Proof. Suppose hyp (10.18). We claim that 

la = Qt(qi,4)-a + Rm(q,a), 

2. Qt(q,@) = Qt(go, Qt(q,a)) - a2 + Rm(q2, Qt(q,2)), 

3. Qt(g/ai, Qt(q,@)) = Qt(g2, Qt(q1,2)) + (C92 - a1) /@) + 
Qt(q/q,Rm(92, Qt(m,a))), 

4. Qt(9/a1, Qt(,2)) = Qt(g, Qt(1,@) 41), 

5. Qt(g, Qt(q,4)-m) = Qt(q, a), 

6. Qt (92, Qt(q, @))-((92-11)/9) + Qt(a/a1, Rm(g2, Qt(a1,4))) = Qt(m,a). 


We have (1} and (2) directly. Since (q/q1) | q2, (3) follows from (2), and (4) 
is obvious. Since g; < g and Rm(q,@) < q1, (5) follows from (1). By (3), 
(4), and (5) we have (6). But 6 | ((q2-41)/q) since ¢ < q2, so con (10.18). 
Thus (10.18). 


10.19 Thm. enc(q1,42,2,a,) & enc(q3.q4,y,0) & t Fy > 
HNL <K UV B<USN<h. 
Proof. Suppose hyp (10.19), and suppose (q = g3Vq = qu) & 41 <9 < q2. 
We have (q2/(qi - 4), Qt(qi - 4,a)) = Encx, so by (10.18) we obtain 
Rm(4, Qt(q/(q: -4), Ene z)) = Rm(4, Qt(g,a)) = 2. 


But since q/(q1- 4) is a power of four, there exists r such that r is a power 
of two and r-r =q/(q, 4), so 
Rm(4, Qt(g/(q1- 4), Enc z)) = Rm(2,q(r,2)) < 2, 


a contradiction. Thus 


42 10. ENCODING 


1. A(q1 < 93 < g2) & 7(q < 94 < a), 


and similarly 


2. a(93 < 91 < qa) & 7(93 < gz < 44). 


Suppose g, = 93, so that gy < g and gq < a. By (1), q2 < 44 and by (2), 
g2 = g4. Consequently Enc z = Ency and so x = y, a contradiction. Thus 
qu F qs. Suppose gi < gs, so that 91 < gs < qs. By (1) we have q < gs, 
and thus q < g3 -+ con (10.19). Similarly, g3 < q — con(10.19), and 
thus (10.19). 


10.20 Thm. r€a—30(2-b< ak Vy(yAr& yea ye d)). 


Proof. Suppose z € a, so there exist q, and gz such that enc(q, g2, 2,4). 
Let b = Qt(qz,a)-9-4+Rm(q -4,a). (That is, 6 is obtained from a by 
deleting Enc z.) Since q1-4-4 < q2, Rm(q-4,a) < q1-4, and Qt(q2,a)-q2 < a, 
we have 4-6 < 2-a, so that 2-6 < a. Suppose 1:y 4 t& y € a, 
so there exist gg and g4 such that enc(g3.q4,y,a)- By (10.19), q1 < a2 < 
3 < GV 43 < G4 <M < ge. Suppose 2: gq < go < 93 < qq. Then 
enc(q3/|Enc z|4,q4/|Enc z|4,y, 6), and thus (2) — y € b. Suppose 3: gg < 
q <M < go. Then enc(gs,q4,y,6), and thus (3) — y € b. Therefore y € 6, 
and thus (1) - y € 6. Thus (10.20). : 


10.21 Thm. c€ase<a. 


Proof. Suppose x € a. Then Encz < a. But 0 = EncO, 1 = Encl, and 
2< 2-72 < |zl2-2 < jel, -|zlp = Encaly < Encz, so x < Encz < a. 
Thus (10.21). 


10.22 Def. ais aset + ~3b(b< a & Ve(z €a—> ce d)). 


Chapter 11 


Bounded separation and 
minimum 


Let Q), be the current theory; that is, the extension of Q; obtained by 
adjoining the defining axioms up to the present. 


Metatheorem 11.1 Let T be an extension of Q), let A be a bounded 
formula of T, and let x, y, and z be distinct variables such that z does not 
occur in A. Then 


BSD. {x €y: A} =z min, Vx(x Cy & A> x €2) 


is the defining azitom of a bounded function symbol. (The variables in the 
term {x © y: A} are y and the variables distinct from x that occur free in 
A.) The following is a theorem of T|(BSD)}: 


BS. {xe y:A}isaset & {xey:A}<y& 
(xe f{xey:A}oxey & A). 


Demonstration. The uniqueness condition for (BSD) holds by (9.8) and 
the definition of min in Chapter 8. By (10.21), 


rp ¥x(x€y & A> x2): x<y, 


and of course 
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rp devx(xey & A> x Ez). 
Therefore, by BLNP we have the existence condition for (BSD), and 
ky dzrhs (BSD):2<y,x <y. 


Hence (BSD) is the defining axiom of a bounded function symbol. To 
prove (BS) in T{(BSD)], we argue as follows. 

We have {x Ey: A}isaset & {x © y : A} < y from the defining axioms 
(10.22) and (BSD). Let z = {x € y: A}. Clearly 


Lxé€yk&A>xen, 
Suppose x € z & -=(x € y & A). By (10.20) there exists z, such that 
2 <2 & Vxy(x Ax & xy Ez7x, Ey). 


(Here z; and x; are distinct, and are distinct from x, y, z, and all variables 
occurring in A). Suppose x; € y & A,[x,]. Then x; # x, and x; € z by (1), 
so X} € Zz). Thus 


Vxa(xi € y & Ax[x1] > x1 € 21), 


which contradicts the minimality of z. Thus (BS). 
Given a formula A and a variable x, let y be the first variable in alpha- 
betical order distinct from x and all variables in A. Then we write 


max, A for A & >2y(x <y & A,[y]). 
(We could also define max,,,y, A in the obvious way, but it does not seem 
likely that we would ever have occasion to use it.) 


Metatheorem 11.2 Let T be an extension of Q}, let A be a formula of T, 
and let x, y, and z be distinct variables such that z does not occur in A. 
Then 


MIND. Minx(x < y & A) =z. min,(z <y & A,(z)), 
otherwise z = 0, 


MAXD. Maxx(x <y & A) =z max,(z < y & A,{z]), 
otherwise z = 0 
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are defining azioms of bounded function symbols. (The variables in these 
terms are y and all variables distinct from x that occur free in A.) The 
following are theorems of T\(MIND)j and T|(MAXD)] respectively: 


MIN. x <y & A — Minx(x<y & A) <x & A,[Minx(x <y & A)], 
MAX. x <y & A x < Maxx(x<y & A) & A,[Maxx(x <y & A)]. 


Demonstration. The uniqueness conditions hold by (9.7) and the defi- 
nitions of min and max. We have 


Fy dz rhs (MIND):z < y, 


and similarly for (MAXD), so these are defining axioms of bounded function 
symbols. 

To prove (MIN) in T|(MIND)] we argue as follows. Suppose x <y & A. 
By BLNP there exists z such that 


min,(z < y & A,[z}), 


so that Minx(x <y & A) =z. Then z <x & A,[z}. Thus (MIN). 
To prove (MAX) in T[((MAXD)] we argue as follows. Suppose x < y & A. 
Then y -x <y & Axly — (y — x)]. By BLNP there exists z such that 


min,(z <y & Axly — 21), 


so that y — z = Maxx(x <y & A). By MIN, z2<y-—x& A,ly — 2]. Thus 
(MAX). Oo 
Whenever a term of the form Minx(x <a & A), Maxx(x <a & A), or 
{x € a: A} occurs, it is understood that the corresponding defining axiom 
has been adjoined to the theory. 
If all occurrences of Minx in B are in the term Minx(x <a & A), we 
write 


Scopeyjin,B for x<a& A, 


and similarly with Minx replaced by Maxx. We sometimes omit x and 
write scopey,,,B. 


Chapter 12 


Sets and functions 


Although conceptually simple, the encoding procedure is laborious. In 
this chapter we will develop an elementary theory (in the mathematical 
sense of a collection of theorems) of certain finite sets of numbers, and 
afterwards we can hopefully forget the details of the encoding procedure. 


12.1 Thm. Oisaset & a(2 € 0). 
Proof. Clearly 0 is a set. By(10.21), +(x € 0). 

12.2 Thm. a and baresets & Va(r Caereb) -a=b. 
Proof. Suppose hyp({12.2). Then a < 6 < a. Thus (12.2). 
12.3 Def. {z} = {y € 2- |Enca|,-4-4+ Encz-4+2:y= a}. 

12.4 Thm. {z}isaset & (ye {xr} + y =z). 
Proof. By BS, {rz} isaset & (ye {sz} ~ y= <2). We have 
enc(1, {Enc z|q-4-4,2,2-|Encz|g-4-4+ Encz-4+ 2), 
sox € {x}. 
12.5 Def. au b= {xe a-\by-4+b:2E€ ave d}. 
12.6 Thm. aUbisaset & (r€aUboreavere bd). 


Proof. By BS,aUbisaset & (rx €aUb > xreaveé db). Let 
c = a: |bl4-4 +6. (We do not claim that ¢ is a set.) Suppose z € a. 
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Then there exist gq, and q, such that enc(q,,q2,2,a). Let gs = q - [bla - 4 
and let g4 = gz - |bl4-4. Then enc(qs, q4,2,c), so that z€ cand rE aud. 
Thus z€a— 2€auUb. Suppose x € b. There exist g, and gz such that 
enc(g1,q2, 2,0), and we also have enc(q:,q2,2,¢). Thus z€ b+ 2 €aUb, 
and so (12.6). 


12.7 Def. aNb= {x Ea: re db}. 
12.8 Def. aC bo Vz(r EC a zed). 
12.9 Thm. aisaset &KaCbacx<b. 
Proof. Suppose hyp(12.9). Then it follows from BS that we have a = 
{zé€a:r€a}={xEb:2€ a} < b. Thus (12.9). 
12.10 Def. (z,y) =(zr+y)-(c+y)+y. 


Notice that the ordered pair (z,y) need not be a set, but it has the 
following crucial property: 


12.11 Thm. (21,y1) = (£2, 42) 7 21 = 22 & ys = yo. 


Proof. Suppose hyp(12.11) and suppose z1+y, < r2+Yyg. There exists z 
such that 7) + y+ 2=2,+y: & z#0. Then 


(20, y2) =(titmt+2)-(at+yt2z)ty= 
(si+y:)-(t1 +4) +2-2-m4+2-2-2,4+2-2+ 42, 


so (Z1,y1) < (z2,y2), a contradiction. Thus z2 + yz < 21+ y, and similarly 
2y+y1 < 2. + Y2, so that 2 + yy = 22+ Y2. By hyp(12.11) and (9.1) we 
have y; = yo, and so 2) = £2. Thus (12.11). 
12.12 Thm. x < (2,y) & y < (z,y). 
Proof. Clearly y < (z,y). Also, r< x-2 < (zy). 
12.13 Def. f is afunction o fisaset & Vuw(we f > drdy(z,y) = w) 
& Vey Vyo((z.41) € f & (2,42) € f > 1 = ye). 
12.14 Def. f(x) =yo fisafunction & (x,y) € f, otherwise y = 0. 
The uniqueness condition follows from (12.13). In addition, we have 
dy rhs (12.14): y < f, so (12.14) is the defining axiom of a bounded function 


symbol. Notice that it is a binary function symbol; f(x) is a term with two 
variables, f and z. 
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12.15 Def. z is in the domain of f + f is afunction & dy (z,y) € f. 
12.16 Def. y is in the range of f + fis afunction & Iz (z,y) € f. 


12.17 Thm. f and g are functions & f(j) = g(j) & 
vi(i is in the domain of f « 1 is in the domain of gj <i< k) & 
Vij Sick & f(t) = ot) — fF +1) = g(t +])) > fag. 

Proof. Suppose hyp(12.17). By (12.2) we need only establish that 
Vw(w € f + w € g), so we need only show 1: Vt f(t) = g(t). Suppose (1). 
By BLNP there exists 1 such that min, f(t) 4 g(t). Clearly 7 < 1 < k. Since 
f(z) = 9(7), we have t # 7. Therefore j < 1-1 < k, and by the minimality 
of ¢ we have f(t — 1) = g(i- 1). Hence f(t) = g(2), a contradiction, and 
thus (1). Thus (12.17). 0 

Let us try to construct bounded function symbols Dom and Ran to ex- 
press the domain and range of a function. It is intuitive from the encoding 
procedure that the domain or range of a function is smaller than the func- 
tion, but to establish this we need to refer to the details of the encoding 
procedure—let us hope for the last time. 


12.18 Thm. r< y- Encaz < Ency. 


Proof. Suppose 3rJy7(12.18). By BLNP there exist minimal such z and 
y. Clearly z # Oandy #0, Let u = Rm(|z\|2,z) and let v = Rm(|y|2,y). 
By (10.11), Qt({z,z) = 1 = Qt(lyl2,y), so z = {zlp+ u and y = ly|, + v, 
where u < |zlz and v < |yla. We have Encr = |z/q - !zlp + Encu and 
Ency = jyj2- {yl2 + Encv. Also, [z|z < |y|2. Suppose |z}2 < lyjz. Then 
Enc z < Enc y, a contradiction, and thus |z|) = |y|2. Consequently u < v. 
By the minimality assumption, Encu < Encv, so that Encr < Ency, a 
contradiction. Thus (12.18). 


12.19 Thm. f isafunction & aisaset & 
vavy(reakyeok z4y— f(z) fly) & 
Va(ré€a2< f(z) & f(z) eb) -aK<d. 
Proof. Suppose jadb-(12.19). By BLNP there exist minimal such a 
and 6. Clearly a #0, so Srz € a by (12.12). Let 
m = Maxa(n < 6 & 3g2d2(z ¢ a & Enc (91,92, f(z), 8))). 


By MAX there exist g, and z such that z € a & Enc (91,92, f(z),6). Let 
a = {t€a:t zh. Then ap is a set and, by (10.22), ap < a. Let bb = 
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Rm(q-4,5). Then by < 6. Suppose to € ao. Then zo 4 2, 80 f (zo) # f(z). 
Since f(zo) © b, there exist gz and g, such that enc(q3,q4, f(Zo),6). By 
(10.19) and the definition of 9, we have qs < 94 < 91 < gz. Consequently 
f (zo) € 69. Thus, by the minimality assumption, ao < bo. Observe that 


2-|Enc f(z)|a-91°4-4+ Enc f(z) + q1-4-b0 < 6, 
and let 
a, =2-!Enczl,-q)-4-4+4+ Encr-q,-4 + a. 
Since zs < f(x) we have a, < b by (12.18). Since jap|4 < q,: we have 


enc(q;, [Enc z|4-9,-4-4,2,@,), so that x € ay. Also ap C ay, so that a C a). 
Since a is a set we have a < a, by (12.9). Hence a < 5, a contradiction. 
Thus (12.19). 

This result is not useful at present because we have no replacement 
principle to produce functions. Function symbols are much easier to come 


by than functions. Let Q] be the current theory. 


Metatheorem 12.1 Let T be an extension of QY and let f be a bounded 
(1+ v)-ary function symbol of T. Then the following ts a theorem of T: 


FS. aisaset & 
Vevy(zccakyecak ety ofra...x, A fyx...2,) & 
Ve(r€a>z<frx...2, & frr,...2,€ 6) -a<b. 


Demonstration. To obtain a proof of (FS), replace. in the proof of (12.19), 
each occurrence of (12.19) by (FS) and each occurrence of f(x) by fxx)...2,. 
12.20 Def. Graph(z, f) = (2, f(z)). 

12.21 Thm. aisaset & V2(z€a-> zis in the domain of f) ~a< f. 


Proof. We have x # y — Graph(z, f) # Graph{y, f) by (12.11), and 
x < Graph(z, f) by (12.12), and z is in the domain of f + Graph(z, f) € f. 
Suppose hyp(12.21). By FS we have a < f. Thus (12.21). 
12.22 Def. Dom f = Maxa(a< f & aisaset & Ye(x €a-— cz is in the 
domain of f)). 
12.23 Thm. « € Domf + « is in the domain of f. 

Proof. Since scopéstax a(12.22)4|0], we have [hs (12.23) > rhs (12.23) by 
MAX. Suppose rhs (12.23) & -—lhs (12.23), and let a = Domf U {x}. 
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Then a is a set and Vx,(z,; € a > z, is in the domain of f}, so a < f by 
(12.21). By the maximality of Dom f we have a < f, which is impossible 
since Dom f Ca & Domf #a. Thus (12.23). 


12.24 Def. Hparg(y, f) = (Minz(z < f & f{z) = y),y). 
12.25 Thm. aisaset & Vy(y € a— y is in the range of f) > a< f, 


Proof. We have 1 # ye > Hparg(y,f) # Hparg(ye,f), and y < 
Hparg(y,f). Also, y is in the range of f > Hparg(y,f) € f by MIN. 
Suppose hyp(12.25). By FS we have a < f. Thus (12.25). 


12.26 Def. Ranf = Maxa(a< f &aisaset & Vy{y € a > y is in the 
range of f)). 


12.27 Thm. y € Ran f © y is in the range of f. 


Proof. The proof is almost identical with that of (12.23). 

The notions of set and function are very useful, but we must take care 
not to use properties that have not been established. In particular, we do 
not have the set of all numbers < n, and we do not have power sets. 

The intuition that the set of all subsets of a finite set is finite--or more 
generally, that if A and B are finite sets, then so is the set B4 of all 
functions from A to B—is a questionable intuition. Let A be the set of 
some 5000 spaces for symbols on a blank sheet of typewriter paper, and 
let B be the set of sorne 80 symbols of a typewriter; then perhaps B4 is 
infinite. Perbaps it is even incorrect to think of B4 as being a set. To do so 
is to postulate an entity, the set of all possible typewritten pages, and then 
to ascribe some kind of reality to this entity--for example, by asserting that 
one can in principle survey each possible typewritten page. But perhaps it 
simply is not so. Perhaps there is no such number as 80°; perhaps it is 
always possible to write a new and different page. Many ordinary activities 
are built up in a similar way from a rather small set of symbols or actions. 
Perhaps infinity is not far off in space or time or thought; perhaps it is while 
engaged in an ordinary activity—writing a page, getting a child ready for 
school, talking with someone, teaching a class, making love—that we are 
immersed in infinity. 


Chapter 13 


Exponential functions 


In this chapter we prove some familiar properties of exponentiation by 
assuming as given a function f that is exponentiation (1 > 2’) on the 
domain of all i < k. 
13.1 Def. exp(z,k, f) > f isafunction & f(0)=1 & Vi(ie Domf o 
i<k) &Vilick > f(i+1) =2-f (2). 

We have rhs (13.1):1 < Max(f,k). 
13.2 Thm. exp(z,k, f) & exp(z,k,g) > f =g. 

Proof. By (12.17). 

13.3 Thm. exp(z,k, f) & exp(y,k,g) & exp(z-y,k,k) > A(k) = f(k)-g(k). 

Proof. Suppose hyp(13.3). We will show that in fact 1:1 < k - A(t) = 
f(t)-9(2). Suppose 37-=(1). By BLNP there exists a minimal such 7. Clearly 
1 #0. Therefore h(i — 1) = f(t — 1) - g(t — 1), and so h(t) = f(t)- g(t), a 
contradiction. Thus (1), and thus (13.3). 

13.4 Thm. exp(z,k, f) & exp(z,l,g) & exp(z,k +1,h) + h(k +1) = f(k)- 
a(!). 

Proof. Suppose hyp(13.4). We will show that 1:7 < k - h{i+]) = 
f(2)-g(t). Suppose 4i-=(1). By BLNP there exists a minimal such 1. Clearly 
t #0. Therefore A(i—1+/) = f(i—1)-g(l), and so A{i+l) = f(t) -g(l), a 
contradiction. Thus (1), and thus (13.4). 
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13.5 Def. Rstr(f,7) = {w € f : Ajdy((,y) = w & J <2)}- 
13.6 Thm. f is a function — Rstr(f,7) is a function & (7 <1 > 
Rstr(f,1)(9) = f(7)). 
Proof. By BS. 
13.7 Thm. exp(z,k, f) & i < k — exp(z,1, Rstr(f,2)). 
Proof. By BS. 
13.8 Thm. exp(z,k, f) & exp(f(k),1,9) & exp(z,k-1,h) > h(k-1) = g(l). 


Proof. Suppose hyp{13.8), We will show that 1:1 <1 — h(k- 1) = g(t). 
Suppose 474(1). By BLNP there exists a minimal such 7. Clearly 7 4 0. 
Therefore h(k - (¢ — 1)) = g(t — 1). By (13.7) and (13.4), 


Rstr(h, k -1)(k-1) = Retr(h, k (i — 1))(k- (i — 1) - Rstr(h, k)(&), 


so by (13.6), h(k-2) = h(k-(¢-1))}-A(k). That is, h(k-2) = g(t—1)-h(k). But 
by (13.7) and (13.2), Rstr(h,k) = f, so by (13.6), h(k) = f(k). Therefore 
h(k +2) = g(t —1)- f(k). But g(t — 1) - f(k) = gft), so h(k-2) = g(t), a 
contradiction. Thus (1), and thus (13.8). 

13.9 Thm. zc #0 & exp(z,k, f) &i < k — f(t) 40. 


Proof. Suppose 31-(13.9). By BLNP there exists a minimal such 7. 
Clearly 1 #0, so f(i — 1) #0 and f(:) 4 0, a contradiction. Thus (13.9). 


13.10 Thm. 2< 2 & exp(z,k, f) &i< jg ck -> f(t) < f(y). 


Proof. Suppose 4j-(13.10). By BLNP there exists a minimal such j. 
Clearly j # 0, so f(t} < f(7 -1) Vi =j — 1, and hence f(z) < f(j — 1). 
But f(y - 1) # 0 by (13.9), so f(t) < f(7-1) < e-f(G—-1) = f(s), a 
contradiction. Thus (13.10). 

13.11 Thm. 2< zc & exp(z,k, fi) & exp(z, ho, fz) & filki) = fe(kz) > 
ky=kp & fi = fe. 


Proof. Suppose hyp(13.11} and suppose k; < kz. By (13.7) we have 
exp(z, ky, Rstr(f2,41)), so by (13.2), Rstr(fz,k:) = fy. By (13.6), fo(ki) = 
Silky), but by (13.10), fo(ki) < fo(k2). Hence fi(ki) < fo(kz), a contra- 
diction, and thus k, < ky. Similarly, k, < £2, so that ky = ky. By (13.2), 
fi = fo. Thus (13.11). 
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13.12 Thm. exp(2,k, f) & t< k > f(z) is a power of two. 


Proof. Suppose 47(13.12). By BLNP there exists a minimal such ¢. 
Clearly 1 4 0, so f(t — 1) is a power of two and hence f(i) is a power of 
two, a contradiction. Thus (13.12). 


13.13 Thm. exp(2,k, f) & x < f(k) > W< k & |zle = f()). 


Proof. Suppose hyp(13.13) and suppose z < 1. Then |z|2 = 1 = f(0), 
and thus z < 1 — con(13.13). Suppose 2 < x. Then |z|z < x, so |z|z < 
f(k). By BLNP there exists / such that min, |z|, < f(l). But |x|, 4 1, so 
1 #0 and hence f(!—1) < |zl. < f(!) = 2- f(L- 1). By (13.12), f(i- 1) 
and |zl_ are powers of two, so by (10.6) we obtain 1 < |z|2/f(l — 1) < 2. 
Hence |z[2 = f(l). Thus con (13.13), and thus (13.13). 


13.14 Thm. exp(z,k, f) & exp(y,k,g) & x <y — f(k) < g(k). 


Proof. Suppose 3k3f4g—7(13.14). By BLNP there exist minimal such k, 
f,andg. Clearly k #0. Let f, = Rstr(f,4— 1) and let g, = Rstr(g,k — 1). 
By the minimality assumption, f,;(k—1) < g,;(k—1). Therefore f(k) < g(k), 
a contradiction. Thus (13.14). 


Chapter 14 


Exponentiation 


Let Q}' be the current theory. Notice: in this chapter we will work in 
unbounded extensions of Qj’. (When I say that something is unbounded, 
I mean merely that I do not claim that it is bounded.) We mark with “!” 
the defining axiom of any unbounded symbol. The “!” serves as a warning 
that we may not use BI (or BLNP, BSD, BS, MIND, MIN, MAXD, MAX, 
or FS) on formulas containing the symbol. 

14.1 Def! e(k) + Vrif exp(z, k, f}. 
14.2 Thm. ind, e(k). 

Proof. We have Vxexp(z,0,{(0,1)}) and so (0). Suppose exp(z,k, f) 
and let g = f U {(Sk,z- f(k))}. Then exp(z, Sk,g), and thus (14.2). 0 

Recall from Chapter 5 the abbreviations C!, C?, and C*, where C is a 
unary formula. If p is a unary predicate, we write p!(a) for p(k)}[a], p?(a} 
for p(k)?[a], and p°(a) for p(k)*{a]. : 

14.3 Thm. (e%(k) — e(k)) & (e8(k) & i < k > e(2)) & &(0) & 
(e8(k) > e8(Sk)) & (e%(k) & e8(1) 3 e8(k +2) & &F(k-1)). 

Proof. By (14.2) and REL. 

14.4 Deff otk = 20 e%(k) & Aff(exp(z,k,f) & f(k) = z), otherwise 
z=0. 

The uniqueness condition holds by (13.2). It is convenient to have a 
symbol 7 for exponentiation, but we also use the abbreviation a° for a ] b. 
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Let us use semantics to discuss the picture of the number system that 
is emerging. The discussion will be informal; we will not distinguish be- 
tween a model and its universe, or between individuals and their names (see 
[Sh,§2.5]). Let T be the theory whose nonlogical axioms are (3.1)—(14.4) to- 
gether with all formulas of the form (BSD), (MIND), and (MAXD) tacitly 
used in these formulas (but not the axiom scheme (MBI)), and whose non- 
logical symbols are those occurring in these formulas. Let M be a model 
of T. For u a nonlogical symbol of T, let us also denote the corresponding 
predicate or function of M by u. Let C be an inductive formula of T and 
let Mc = {€ EM: C*[E]}. This becomes a model of T if we make the fol- 
lowing definitions. Each nonlogical predicate symbol p of T is introduced 
in an axiom of the form px,...x, © D; for &,...,&, in Mc, we say that 
Po(f1,---, &) holds in case D©[&,,...,€} holds. The set Mc contains 0 
and is closed under S, P, +, and -. Every other function symbol f of T is 
introduced in an axiom of the form fx;...x, = y © D; for &,...,& in Mc 
we let fo(£1,---,€) be that element 7 of Mc such that D|&,,...,&,1] 
holds. Now for p a bounded predicate symbol (i.e., for p a predicate symbol 
other than €), pe is simply the restriction of p to Mc, and for f a bounded 
function symbol (i.e., for f a function symbo! other than f), fc is simply 
the restriction of f to Mc. A bounded predicate symbol does not change 
its meaning; a bounded function symbol does not change its values. It is 
different for « and [. Suppose we have an individual « in Mc such that 
e(«x) holds. Then for all ¢ in M, and so certainly for all € in Mc, there is 
a ¢ such that exp(£,«,¢) holds—but nothing guarantees that ¢ € Mc even 
when € and « are in Mc. But ec(«) holds only if ¢ € Mc, so that e(x) 
and ec(x) may mean different things. Similarly, for € and « in Mc we may 
have € tf k = ¢ with ¢ g Mc. In this case € Tp K = 0, so that € | « and 
€ Te « may have different values. 

Now if the inductive formula C is bounded, then C holds in the model 
Mc; this is the method we have been using to successively refine our concept 
of number. Each time we perform a bounded induction the model becomes 
smaller, and closer to our intuitive idea of what the number system should 
be. But for an unbounded C this need not be so. For example, consider 
the inductive formula e(«), which we call ¢ for short, and form M,. We 
have e(«) for all « in M,, but this does not mean that we have a model of 
Tivk e(k)|. We can iterate this process: introduce €1,€2,... by 
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e1(k)  Vz(e*(z) > Af(e*(f) & exp(z,k, f))), 
éa(k) Vale} (x) > Sf(ei(f) & exp(z,k, f))), 


In this way we obtain successively smaller models, 


M 2M, 2M., 2--- 2M, 2°, 


a 


but none of these relativizations helps one whit to establish Vk ¢(k). 

Semantics tells us that there is an intersection M,,, of these models and 
that M,, is closed under exponentiation. This seems to be beyond the reach 
of syntax, as is the minimal model N. The minimal model is a model of J, 
since for any inductive C we have Nc C N and so Nc =N. This N is the 
legendary standard model of Peano Arithmetic. But how can we express 
what membership in N means? The concept of the finite in mathematics 
is subtle and elusive. 

Semantics is a picturesque metaphor to illustrate syntax, but like all 
metaphors it depicts more than may have been intended. A nominalist 
distrusts semantical reasoning that involves syntactically inexpressible con- 
cepts. 


14.5 Thm. 3 (k) & e8(1) > (z-y)F = che y* & cht a ok eg! & okt = (x)! 
Proof. By (14.3), (13.3), (13.4), and (13.8). 

14.6 Def! z is a power of 6  Jk(e*(k) & oF =z). 

14.7 Thm. z is a power of 2 — z is a power of two. 


Proof. Suppose x is a power of 2. Then there exist k and f such that 
exp(2,k,f) & f(k) =z. By (13.12), z is a power of two. Thus (14.7). 0 

What about the converse to (14.7)—can we show that 1: z is a power of 
two — z is a power of 2? If z is a power of two, we want a k such that 2* = z. 
This k will be much smaller than z, so this does not seem too much to ask. 
But we cannot use BLNP to prove (1) because 2* = z is an unbounded 
formula. This suggests, not that there is an arithmetical obstacle, but 
that our formalism is inadequate. The problem of establishing (1) is a 
test problem; the motivation for attacking it is to obtain more powerful 
methods. The difficulty is that the objects used to express the relationship 
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* = x, in particular the function f such that exp(2,k, f} & f(k) =z, are 
big. We can obtain a bound on f of the form 2°**, where C is a constant, 
but this cannot be polynomially bounded in terms of z (that is, 2"). Let 
us try to go beyond polynomials and use the function # that on powers 
of 2 satisfies 2'42' = 2'!_ Then powers of 2 behave with respect to 1, 
multiplication by 2, -, and # like numbers with respect to 0, S, +, and -, 
so we should be able to adapt the relativization scheme of Chapter 5 to 
include #. 


14.8 Def! A(z) 3k x < QF. 


We would hope to establish that A(x) holds universally, but let us first 
investigate the universe of numbers z that do satisfy A(z). 


14.9 Thm. (0) & (A(z) + A(Sz) & A(Pz)) & (A(z) & A(y) > A(z4 y) 
& A(z-y)) & (A(z) &w sz A(w)). 


Proof. Clearly 4(0). Suppose z < 2* & y < 2) & w < xz. Then 
Pr < Sa < 2*+1, so \(Pz) and A(Sz). We have z+ y < 27 (Max(k,!) + 1), 
so A(z + y). We have z-y < 2**!, so A(x-y). Finally, A(w) is obvious. 
Thus (14.9). 


14.10 Def! Logo z = k « |z|2 = 2", otherwise k == 0. 
The uniqueness condition holds by (13.11). 
14.11 Thm, €3 (Logo z). 


Proof. We have Logo z = 0 — (14.11) since €7(0), so suppose Logy x # 0. 
Since |x|, # O we have e*(Logy z) from (14.4), and thus (14.11). 


14.12 Thm. \(2*). 
Proof. From (14.8). 
14.13 Thm. X(2) — |z|z = 2he8e* = ghoao ele, 


Proof. Suppose \(z). Then there exist k and f such that e%(k) & 
exp(2,k,f) & az < f{k). By (13.13) there exists J such that] <k & 
lzlz = f(0). We have e3(1). Also, exp(2,/,Rstr(f,J)) and Rstr(f,J)() = 
f (1) = |z\p, so that |z|z = 2! and | = Logo x = Logo jz!2. Thus (14.13). 


14.14 Def! x #oy = 2boan* Leaow, 
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14.15 Thm. A(z #oy). 
Proof. By (14.12). 

14.16 Thm. x #oy = |z Hoyle = |z\2 Ho lyle = [Zia Hoy = T Ho |yle- 
Proof. We have 


t#oy = 2 ft (Logo z- Logo y) = 
2 T (Logo {z|2 - Logo |y|2) = |x]2 #0 lule- 


By (14.11) and (14.3) we have <*(Logo z - Logg y), so by (14.7), x #oy is a 
power of two. Hence 2 #9 y = |x #0 y|2. Since ||x|2|2 = |z|2 we have (14.16). 
14.17 Thm. «#91 = 1. 

Proof. We have #01 = 2} (Logo z- Loge 1) = 270=1. 
14.18 Thm. (x) — #02 = |zI2. 


Proof. We have z #o2 = 2 T (Logo z- Logo 2) = 2 1 Logo x, so by (14.13) 
we have (14.18). 


14.19 Thm. cr #oy = y Hor. 

Proof. We have z#oy = 2 | (Logo z- Logg y) = 2 T (Logo y - Logo x) = 
y #or. 

14.20 Thm. Logo (x #0 y) = Logg x: Logo y. 

Proof. By (14.16), |z #ouj2 = z#oy = 27 (Logo x - Logo y), so (14.20). 
14.21 Thm. (cx #0 y) #0z = F #0 (y #02z)- 

Proof. By (14.20) we get (x #oy) #oz = 21 (Logo (z #oy) - Logo z) = 
2} (Logo 2 - Logo y - Logo z) = 2 * (Logo x - Logo (y #o z)) = 2 #0 (y #0 2)- 
14.22 Thm. Ay) & A(z) > x #o (lula - |2l2) = (2 #0 lyl2) - (2 #o [z[2). 

Proof. Suppose A(y) & A(z). By (14.13), |yl2 = 2 7 Logo lyls and 
[2], = 2 } Logo |z|2, so that |yl2-|z|2 = 2 1 (Logo |yl2 + Logo |z2) and so 
Logo (|yl2- |2l2) = Logo lyl2 + Logo |z|2- Hence 


2 #o (lyle- |2\2) = 2 T (Logo x - (Logo |y|2 + Logo |z|2)) = 
(2 1 (Logo £ - Logo |yl2}) - (2 f (Logo x - Logo |z|2)) = 
(z #0 lle) - (2 #o |2|2)- 
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Thus (14.22). 
14.23 Thm. X(z) = (y< 27 2#oy < 2#o2). 


Proof. Suppose A(z) & y < z. Then A(y), and by (14.13) and (13.10) 
we have Logo y < Logo z. By (13.10) again, z#oy = 21 (Logo x-Logoy) < 
2 1 (Logo z - Logo z) = 2 #02. Thus (14.23). 


Chapter 15 


A stronger relativization 
scheme 


We concluded Chapter 14 by proving some properties of #5, but some 
of these held only conditionally, subject to A(z) for certain z. What we can’t 
prove, we can postulate. Let Qs be the theory obtained from Q?' (this is 
the bounded extension of Q2 defined at the beginning of Chapter 14) by 
adjoining a binary function symbol # and the following nonlogical axioms: 


15.1 Az. c#y = |cr#yle = lee # lyle = |e Hy = c# lyle, 
15.2 Ar. c#1=1, 
153 Ano 2 = 2, 
15.4 Ar c#y = y# 2, 
15.5 At. (cx#y)#2=c#(y#2), 
15.6 Az. 2 # (|yle + j2l2) = (c# |yle) - (2 # [2l2), 
15.7 Ar y<z or#y<c#z. 
Metatheorem 15.1 Qs 1s interpretable in Qo. 


Demonstration. Let T be the (unbounded) extension by definitions of Q2 
obtained by adjoining all of the symbols and defining axioms through the 
end of Chapter 14. We construct an interpretation I of Qs in T. Let the 
universe of ] be \. For each nonlogical symbol u of Q3 other than #, let wy 
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be u, and let #; be #0. By (14.9), is hereditary and respects 0, S, P, +, 
and «. Also, 4 respects each nonlogical axiom of Q2: the nonlogical axioms 
of Qi because they are open, the defining axiom of < because 2 is hered- 
itary, and the axioms (MBI) by Metatheorem 7.1. By Metatheorem 7.7, 
A respects each nonlogica! axiom and function symbol of Qf’. By (14.15) 
we have ty A(z) & A(y) — A(z #1). The interpretations of the axioms 
(15.1)-(15.7) are theorems of T by (14.16)~(14.19) and (14.21)-(14.23). © 
If C is a unary formula, we write 


C* for Vy(C*ly] > C§[y #2). 


Metatheorem 15.2 Let T be an extension of Q3 and let C be a unary 
formula of T. Then the following is a theorem of T: 
SREL. ClO} & Vz(C/z] + C[Sz]) > 
(C4{2} + C[z)) & 
(Ci{z] & w< xz Ctlul) & 
Ctlo} & 
(C4|z] + C*/Sz] & C*[Pz]) & 
(C4{xy] & C#[x_] + Clay + x2] & C4[x,- 22] & C*{x; # 22). 
Demonstration. We prove (SREL) in T as follows. Suppose hyp(SREL). 
Suppose C‘[z). We have C*[2] by REL, and consequently C%/2#z]. By 
(15.4) and (15.3), 242 = {x/z, and so C*[|z/2]. But z < |z/2-z, so by REL, 
C®/z] and hence C[z]. Thus C4[z}  C[z]. Suppose C4lz] & w < x & C¥lyl. 
Then C'[y #2]. But y#w < y#z by (15.7), so C*[y# w] by REL. Thus 
Ct{z] & w <2 Cw]. By (15.1) and (15.2), y#O0=y#|0) = y#1=1, 
and C1[1] by REL. Hence C/O]. Let a = |xy|2-2-|zy|2-2. Since Sa, < |x, \,-2 
we have Sz; < a, Pz, <a, and 2-2, < a; and since 21 + 22 < 2;:2V 
1 +2, < x2-2 we also have x1 + zz < a. Suppose C*/z,] & C4/zy] & C¥ly]. 
Now 


y#a = (y #|Z[2)-(y #2) - (y# |zel2) - (y# 2) = 

(y #21) -[yls -(y# 22) -|yle < (v# 21) -SPy- (y# 22) -SPy 
by (15.6), (15.1), and (15.2). But we have C3|y # x] and C*ly # 22/, so by 
REL we C*[y #a]. By (15.7) and REL we have C?{y #Sz,], C'[y # Pri], 
C8{y # (21 +2z2)], and C*[y # (x1 -z2)]. Finally, we have C*[y # z,| and hence 
C7\(y # 21) # Z2|, so we have C*[y # (21 # 22)) by (15.5). Thus con(SREL), 
and thus (SREL). 0 
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This relativization scheme is also due to Solovay; see [PD] and [Puj. 


Metatheorem 15.3 Let A be a manifestly bounded formula of Qs that ts 
inductive in one of tts free variables x. Then Q3|A] is interpretable in Qs. 


Demonstration. Let C be A),. By SREL, C‘ is hereditary and respects 
0, S, P, +, and -. Also, C* respects each nonlogical axiom of Q,: the 
nonlogical axioms of Q; because they are open, the defining axiom of < 
because C? is hereditary, and the axioms (MBI) by Metatheorem 7.1. By 
Metatheorem 7.7, C* respects each nonlogical axiom and function symbol 
of Qi’. By SREL, C* respects #, and it respects (15.1)~(15.7) because they 
are open. Finally, C* respects A by Metatheorem 7.1. Therefore Q3[A] is 
interpretable in Qs via the interpretation associated with C*. 0 

We construct a theory Q4, which is an extension of Q3 with the same lan- 
guage, by adjoining as new nonlogical axioms all formulas of the form (MBI) 
(see Chapter 7) where now A is a manifestly bounded formula in the lan- 
guage of Q3. 


Metatheorem 15.4 Let By,...,B, be theorems of Qy. Then the theory 
Q3[Bi,.-.,By] ts interpretable in Qs. 

Demonstration. In the demonstration of Metatheorem 7.3, replace each 
occurrence of Q» by Q4, each occurrence of Q| by Qs, and the reference to 
Metatheorem 7.2 by a reference to Metatheorem 15.3. 


Metatheorem 15.5 Q, is a bounded theory. 


Demonstration. In the demonstration of Metatheorem 7.4, replace each 
occurrence of Qy by Q4. 


Metatheorem 15.6 Let U be an extension of Q4 and let A be a formula 
of U that is bounded over Qs. Then 


BI]. ind, A> A 


ts a theorem of U. 


Demonstration. By Metatheorems 15.5 and 7.5. 0 
Until possible further notice, when we say that a formula, nonlogical 
symbol, or term is bounded, we mean that it is bounded over Q,. We have 
BLNP (Chap. 8), BSD, BS, MIND, MIN, MAXD, MAX (Chap. 11), and FS 
(Chap. 12) for bounded formulas. We will work in extensions by definition 
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of Q4, marking with “!” each defining axiom of an unbounded symbol. To 
start with, we adjoin the symbols and defining axioms of Chapter 14. 

Putting all of our interpretability results together, and using the fact 
that an extension by definitions of a theory containing a constant is inter- 
pretable in it (see [Sh,§4.7]), we see that any extension by definitions of Q4 
is locally interpretable in Q. 

Why could we not have settled at the beginning on a theory, called 
Predicative Arithmetic, with all of the necessary axioms? We would like 
to have a formula A in the language of Q be a theorem of Predicative 
Arithmetic if and only if Q{A] is interpretable in Q. Perhaps this is possible, 
but I do not know the answer to the following compatibility problem: if Q[A] 
and Q|B] are interpretable in Q, then is Q{A, B] interpretable in Q? In the 
absence of a positive solution to the compatibility problem, it is necessary 
to take care, as we have, that our methods for adding a formula to the 
growing list of predicatively established formulas do not interfere with any 
previously established formula. 


Chapter 16 


Bounds on exponential 
functions 


Now we take up the question of how big f is when exp({z,k, f) holds. 
16.1 Thm. {x} < 146-(SPz)?. 


Proof. From the defining axioms of the function symbols involved, we 
find that |zlzp < SPz and Encz < SPx-SPz-4, and so we have {xz} < 
2.(SPr-SPzr-4)-4-44 (SPz-SPzr-4)-4+2< 146: (SPz)?. 


16.2 Thm. aUb<5-SPa-SPb. 
Proof. We have aUb < a-SPb-4+6<5-SPa-SPb. 
16.3 Thm. (z,y) <5-(Max(z, y))?. 
Proof. We have (2,y) = (x+y)? +y < 4- (Max(z,y))? + y? < 
5 - (Max(z, y))?. 
16.4 Def. K = 18250. 
16.5 Thm. f U{(2,y)} < K -SPf - (SP Max(z, y))*. 
Proof. By (16.1), (16.2), and (16.3). 
16.6 Thm. 2<¢ & exp(z,k, f) &t<Sk 37 < f(i). 


Proof. Suppose 4/—(16.6). By BLNP there exists a minimal such 7. 
Clearly 7 # 0. Therefore 1-1 < f(i —1), and f(7—1) # 0 by (13.9), so 
t<a2-f(i—1) = f(a), a contradiction. Thus (16.6). 
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16.7 Thm. 2 < x & exp(z,k, f) > f < K-Rstr(f,k — 1)- f(k)*. 

Proof. Suppose hyp(16.7). Then f = Rstr(f,k — 1) U {(k, f(k))}, 80 
con (16.7) by (16.5), (16.6), and (13.9). Thus (16.7). 

16.8 Thm. a # (2-6) = |a|2 - (a #4). 

Proof. We have a#(2-6) = a# (2-6), = a#(2- |bl2) = (@#2)- 
(a # |bl2) = lal2- (a # 6) 

16.9 Def. r>yoyc<e. 
16.10 Thm. 2< z2>K-24< K# (2-2). 

Proof. Suppose 2 < z. Observe that 2° = 512 < K. Then K# (2-2) = 
[Ke -(K #2) > [Klo + (2°42) = Kla-|zi2 = [Ke - fz! (l2)2)* > K-24. 
Thus (16.10). 

16.11 Thm. 2< x & exp(z,k, f) — f <K#(2- f(k)) #(2-f(&)). 

Proof. Suppose Ski f-(16.11). By BLNP there exist minimal such k 
and f. Suppose k = 0. Then f = {(0,1)} = {(04+1)? +1} = {2} < 146-4= 
584, but K#2#2 = |K|, = 16394, so con (16.11), a contradiction. Thus 
k # 0 and therefore 


Rstr(f,k- 1) SK #(2-f(K- I) #(2-f(K—-1)) S KH F(k) # F(A) 
By (16.7) and (16.10), f < (K #(2- f(k)))-(K # f(e) # f(A). But 


f 
K # (2- £(k)) # (2- F(k)) = [KF (2- £(R)) Io (K # (2- fk) # F(A) 
= (K#(2-f(k)))- (K # (2-S(k)) # F()) 

by (16.8), so con (16.11), a contradiction. Thus (16.11). 

16.12 Thm. z is a power of two > Aki f(exp(2,k,f) & f(k) =z). 

Proof. We have (16.12):k < 2,f < K#(2-2)#(2-2) by (16.6) and 
(16.11). Suppose Jz-(16.12). By BLNP there exists a minimal such 2. 
Since exp(2, 0, {(0,1)}) and {(0, 1)}(0) = 1 we have z 4 1. Therefore 2/2 is 
a power of two, and there exist k; and f, such that exp(2, ky, fi) & fi(ki) = 
2/2. Letk =k) +1and let f = f, 0{(k,x)}. Then exp(2,k, f) & f(k) =<, 
a contradiction. Thus (16.12). 

This does not yet solve the test problem of Chapter 14 because we 
need €°(k) in order to have 2* = x. 


a 
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16.13 Thm. e(k) < e1(k). 

Proof. Clearly e'(k) — e(k). Suppose exp(z,k,f) & 1 < k. Then 
exp(z,7, Rstr(f,1)) and thus e(k) > e'(k). O 

We need some sort of bound on f when exp(0,k, f) or exp(1, k, f) holds. 
16.14 Thm. exp(0,k,f) &0<i<ck— f(i)=0. 

Proof. Suppose hyp (16.14). Then f(z) = 0-f(i—1) = 0. Thus (16.14). 
16.15 Thm. exp(1,k, f) &i<k— f(t) =1. 

Proof. Suppose 31-(16.15). By BLNP there exists a minimal such 7. 
Clearly 1 # 0. Therefore’ f(t — 1) = 1, so f(t} = 1, a contradiction. 
Thus (16.15). 

16.16 Def. Projyz = 2 0 Jy (z,y) = z, otherwise x = 0. 
16.17 Def. Projgz =y — Az (a,y) = z, otherwise y = 0. 
16.18 Def. Rplc(z,g) = (Proji z,9(Proj; z)). 

16.19 Thm. 2 < ty & yy < y2 > (21,41) < (22,42). 

Proof. Suppose hyp (16.19). There exist u and v such that z;+u =z, 
& ytu= yo. Therefore (z2,y2) =(mt+uty+eo)?tmtu = (a,y1) + 
(u + v)? +2-(u+v)-(21 +41) +v. Thus (16.19). 

16.20 Thm. x < 2 & exp(z,k, f) & exp(2,k,9) > f <q. 

Proof. Suppose hyp (16.20). Then 1: 2 Ef&mef&say xu 
Rplc(z1,g) # Rple(z:,g), since hyp(1) — Projy z1 # Proj, z. Also, z € f 
—2z< Rple(z,g) & Rple(z,g) € g by (16.19). By FS (see Chapter 12) we 
have con (16.20). Thus (16.20). 

16.21 Thm. exp(2,k, f) > Ifoexp(0,k, fo) & If, exp(1,k, fi). 


Proof. Now (16.20) gives (16.21): fo < f. fi < f. Suppose Sk3f7(16.21). 
By BLNP there exist minimal such k and f. Clearly k # 0. Therefore 
exp(2,k ~ 1,Rstr(f,& —1)), and there exist go and g, such that we have 
exp(0,k — 1,90) & exp(1,k — 1,91). So now we let fo = go U{(k,0)} and 
let fi = 9. U {(k,1)}. Then con (16.21), a contradiction, and thus (16.21). 


16.22 Thm. 2 < 2 & exp(z,k, f) & exp(z,l,g) — Ahexp(x,k + 1,h). 


Proof. Observe that (16.22): h < K # (2- f(k)-g(k)) # (2-f(k)-g(k)) by 
(16.11) and (13.4). Suppose 3k3f-—(16.22). By BLNP there exist minimal 
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such k and f. Obviously k # 0. We have exp(z,k — 1,Rstr(f,k — 1)), so 
there exists h, such that exp(r,k—1+1,A,). Leth = hyU{(k+, f(k)-g(I))}- 
Then exp(z,k +1,h), which is a contradiction. Thus (16.22). 

16.23 Thm. e(k) + €7(k). 

Proof. Clearly e?(k) — e(k) (or if it is not clear, see the proof of REL). 
Suppose e(k) & e(l). We claim that 1: Shexp(z,k +1,h). Suppose z < 2. 
There exist f and g such that exp(2,k,f} & exp(2,l,g), so by (16.22) 
there exists hy such that exp(2,k+/,h:). By (16.21) we have (1), and thus 
z <2 — (1). Suppose 2 < z. There exist f and g such that exp(z,k, f) 
& exp(zx,l,g), so by (16.22) we have (1). Thus (1), and thus e(k) & e(I) 
> e(k +1). By (16.13) we have e(k) — e?(k), and so (16.23). 

16.24 Thm. 2< 2 & exp(z,k,f) & exp(z,l,g) & exp(z,k-l,h) & 
I< hk gj) < c#4# Sk) #9(7). 
Proof. Suppose hyp (16.24);[0]. Then h(k-0) = 1 and 


cHAd S(k) #9(0) =—cH#4# f(k) #1=1. 


Thus (16.24),|0]. Suppose (16.24) & hyp (16.24),[Sj]. Let 


a= cH 4 S(k) Fay). 
Then h(k-Sj) = h(k- 3) -h(k) = h(k-7)- f(k) <a> f(k). But 


c#4 # F(k) #9(S7) = rH 4 # S[k) # (2-9(3)) = 
a-(r#t4# flk) #2) > a- (2H 4H S[k) #2) — a (4 # L(A) = 
a+ |f(k)|p > a- f(k). 


Thus ind, (16.24), and by BI we have (16.24). 
16.25 Thm, 2< x & exp(z,k, f) & exp(z,l,g) > dhexp(z,k- Uh). 


Proof. Let a = 1#4# f(k)#g(l). By (16.24) and (16.11) we have 
(16.25):h < K#(2-a)#(2-a). Suppose 4k3f—(16.25). By BLNP there 
exist minimal such k and f. Clearly k # 0. As a consequence, we have 
exp(z,k —1, Rstr(f,k—1)), so there exists h; such that exp(z, (k—1)-l, hi). 
Since exp(x,l,g) and k-1 = (k — 1) -1+1, we conclude from (16.22) that 
dhexp(z,k-l,h), a contradiction. Thus (16.25). 
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16.26 Thm. «(k) < e9(k). 

Proof. We have e*(k) —+ e(k) by REL. Suppose e(k) & e(l). We 
claim that 1: Shexp(z,k-l,h). Suppose z < 2. There exist f and g such 
that exp(2,k,f) & exp(2,/,g), so by (16.25) there exists A, such that 
exp(2,k -1,h,). By (16.21) we have (1), and thus z < 2 — (1). Suppose 
2< 2. There exist f and g such that exp(z,k,f) & exp(z,l,g), so by 
(16.23) we have e(k) — e°(k), and so (16.26). 

16.27 Thm. exp(2,k, f) & exp(z,k,g) & i< k > g(t) < (2-2) # f(t). 


Proof. Suppose 3i-(16.27). By BLNP there exists a minimal such ¢. 
Clearly ¢ # 0. Consequently, g(t — 1) < (2-2) # f(t — 1), so 


(2-2) #4) = (2-2) #(2-sE-1)) = 
[2-alz+((2-2) #f@—1)) = x-g(t- 1) = g(t). 
This is a contradiction, and thus (16.27). 
16.28 Thm. exp(2,k, f) & 2 < x — Jgexp(z,k,g). 
Proof. Let a = (2-z) # f(k). By (16.27) and (16.11) we have (16.28): g < 
K # (2-a) #(2-a). Suppose ki f—(16.28). By BLNP there exist minimal 
such k and f. Clearly k #0. We have exp(2,k — 1, Rstr(f,k — 1)), so there 
exists g, such that exp(z,k — 1,91). Let g = g U {(k,x- gi(K —1))}. Then 
con (16.28), a contradiction, and thus (16.28). 
16.29 Thm. exp(2,k, f) — e(k). 
Proof. By (16.28) and (16.21). 
16.30 Thm. xz is a power of two — z is a power of 2. 
Proof. By (16.12), (16.29), and (16.26). 
This is a positive solution of the test problem of Chapter 14. It is 
more than just a test problem, because using it we can show that all of 
the nonlogical symbols of Chapter 14, except for « and 7, are equivalent to 


bounded symbols, and it will be essential in the sequel to have a bounded 
function symbol for the logarithm. 


16.31 Thm. A(z). 
Proof. By (16.30), 3k |z|2-2 = 2*. But x < |z)|, - 2, so (16.31). 


16. BOUNDS ON EXPONENTIAL FUNCTIONS 69 


16.32 Def. Logr =k o 3f(f <K#(2-|z\2) #(2-[z|2) & exp(2,k,f) & 
f(A) = |zl2). 

The existence condition holds by (16.30) and (16.11), and the uniqueness 
condition holds by (13.11). 


16.33 Thm. Logo z = Log z. 

Proof. By (14.11), (16.26), and (16.11). 
16.34 Thm. s#oy=r#y. 

Proof. Write a for 


Sf(f <K#(2-c-y)#(2-z-y) & 
exp(2, Log x -Logy, f) & f(Logz-Logy) = 2 #y). 


Then (16.34) © a, by (16.33), (14.11), (14.3), (16.26), and (16.11). Sup- 
pose 4y—(16.34), Then dy-a, so by BLNP there exists y such that min, 7a, 
ie., minyz#oy # c#y. Since rHoy = c#Holyle and c#y = c#\yl2, 
we have y = |y|2 by the minimality assumption, so that y is a power of 
two. Clearly y # 1 and y # 2. Therefore r#oy = x #o((y/2) - 2) = 
(x #0 (y/2)) -(x #02) = (x # (y/2))- (x #2) = c#y, again by the minimal- 
ity assumption. This is a contradiction, and thus (16.34). 

Thanks to (16.31), (16.33), and (16.34), we will have no further use for 
the symbols 4, Logy, and # . The next result shows that “x is a power 
of &” is also equivalent to a bounded formula. 


16.35 Thm. zis a power of b> (6=0& (cx =OVa=1))v (6=1&2r=1) 

VARS (k< 2 & FS K#(2-2)#(2-z) & expld,kf) & f(d) =z). 
Proof. By (14.11), (16.26), and (16.11). 
We conclude this chapter by giving the defining axiom for superexpo- 

nentiation. The uniqueness condition holds by (12.18). 

16.36 Def! cf} k =z < Sf(f isafunction & Vilic Domf -i<k) & 

fO)=1 & Vili ko e(f(t)) & f(@+1)= 27 F(t)) & fk) = 2), 


otherwise z = 0. 


Chapter 17 


Bounded replacement 


Let Q), be the current theory. 


Metatheorem 17.1 Let T be an extension of Qi, and let D be such that 
JyD ts a bounded formula of T and 2,...,2, are the variables distinct 
from xz and y occurring free in D. Then 


BR.aisaset & Va(x € a-+ dyD) - 
Sf(f isa function & Domf =a & Vz(r€a>D,{f(z)})) 


ts a theorem of T, and 


BRD. {(z,y):2€a& minyD} =f of isafunction & 
Domf =a & Waz(z€a-> (min, D),!f(z)]), otherwise f = 1 


is the defining aziom of a bounded function symbol. (The variables in the 
term {(z,y) : x2 € a & min, D} are a,2,..., ry.) 


Demonstration. Introduce the bounded function symbol f with defining 
axiom 


fexr,...r, =y min, D, otherwise y = 0. 


We will suppress the variables 2,,...,2, from now on, and we will write fx 
for fxz,...2,. To prove (BR), we argue in T as follows. 
We claim that 
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1. de(z € a) + 3z(z€ a & Vu(w € a > fw < fz). 


For suppose Ja—(1). By BLNP there exists a minimal such a. There exists 
a such that zc € a. Let b= {te a:t # x}. By (10.20), b < a; so by the 
minimality of a there exists 2) such that 2} € 6 & Vw(w eb > fw < fz). 
Suppose fz, < fz and let z = z. Then we have a contradiction, and thus 
fe <fz. Let z = z. Again we have a contradiction, and thus (1). 
Introduce the bounded function symbol Maxm; with defining axiom 


Maxmya = 24 min, (z € a & Vw(w € a — fw < f2)), 
otherwise z = 0, 


and the bounded function symbol! Bd; by 
Bd; a = |K - (SP Max(a,f Maxm, a))*i2 - 2. 
Then we claim that 


2. aisaset > Sf(f <(Bda)#a& f isafunction & 
Dom f =a & Vz(x € a> f(z) =fz)). 


Suppose Ja—(2). By BLNP there exists a minimal such a. Suppose a = 0 
and let f = 0. Then (2), a contradiction, and thus a # 0. Since a is a set, 
there exists zo such that zp € a. Let b= {tf € a: t # zo}. By (10.20), 
2-6 <a. By the minimality of a there exists g such that scopes;(2) sa|gQ). 
Let f = 9 U {(xo,fxo)}. Then f is a function, Dom f = a, and Vz(x€ a > 
f(z) =fz}. By (16.5) we have 


f < K- ((Bd; b) #6) - (SP Max(zxo,fxe))* < (Bd; a) - (Bd; 6) # 4). 
By (1) we have Bd; 6 < Bdy a, so by (16.8) we find 
f < (Bd; a) - (Bd; a) # b) = (Bd; a) # (2-6) < (Bd; a) #a. 


Hence we have con (2), a contradiction, and thus (2). 

Now suppose hyp(BR). There exists f such that scopes, (2). Suppose 
xz €a. Then iyD, so by BLNP we have dy min, D. Thus z € a > D,|f(z)], 
and thus (BR). 

The uniqueness condition for (BRD) holds by (12.2), and we have 
Sf rhs (BRD): (Bdya) #a,r<a. 0 

Whenever a term of the form {(z,y) : z € a & min, D} occurs, it is 
understood that the corresponding defining axiom of the form (BRD) has 
been adjoined to the theory. We will write 
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{{z,y):2€a&D} for {(z,y):2€a & min, D}, 


though we usually use this abbreviation only when + D «+ min, D. Also, 
we write 


{(z,b):z2€a} for {(z,y}:r€éaky=b} 


where y is the first variable in alphabetical order distinct from z and a and 
not occurring in b. 


Chapter 18 


An impassable barrier 


Let us pause to examine from an impredicative point of view what we 
are doing. Take a strong theory T containing 0 and S, say an extension 
by definitions of Peano Arithmetic J or even of ZFC (Zermelo-Fraenkel set 
theory with the axiom of choice). Let T be the theory obtained by adjoining 
a unary predicate symbol ¢ and the axiom 

Fin. $(0) & (¢(z) — 4(Sz)). 

This adjunction does not increase the power of the theory in any way; 
we can for example interpret ¢(z) by z = z. If T is an axiomatization of 
arithmetic, say an extension by definitions of J, then by a specific number we 
mean a variable-free term b of T; if T is an extension by definitions of ZFC 
containing the constant w denoting the set of all natural numbers, then by 
a specific number we mean a variable-free term b of T such that Fr b € w. 
We say that a specific number b is a finite number in case +4 ¢(b). 

Now consider a specific number b, such as 10000 or 10 7 10 * 10, and 
try to prove ¢(b). The initial reaction of some mathematicians to such 
a problem is a failure to see the difficulty: they suggest proving ¢(b) by 
induction. But even if the induction principle is an axiom scheme of T, 
we do not have induction available for ¢(z), because the axioms of T say 
nothing about formulas containing ¢. A second reaction is that the problem 
is trivial because there is an obvious proof in b steps. This observation 
manages to be both meaningless and incorrect; meaningless because of the 
ubiquitous pun confusing the formal and genetic concepts of number, and 
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incorrect because there are specific numbers b for which one can show that 
there is no proof in T of d(b). That is, there is a specific number that is 
not a finite number. 

To see this, we will let T be an extension by definitions of J. We as- 
sume that J is consistent; otherwise there is indeed a proof in T of $(b). 
Consider Gédel’s construction of a closed formula VnCjnj that is unprov- 
able even though C[0],C[1], C[2), ... are all provable. Let D be the unary 
formula C|n] — Vn C[n]. Then 3n D[n] is provable, since it is equivalent to 
the tautology Vn Cin] > Vn C[n]}, but Dio], D1], D!2), ... are all unprov- 
able, since from a proof of one of them and the proof of the corresponding 
theorem among C(0j, C/1}, C|2], ... we would immediately obtain a proof 
of Vn Cin]. Now consider the constant N with the defining axiom 


1 N=n< Din] & ¥m(m < n > =D{mi). 


The existence condition holds by the least number principle and the unique- 
ness condition is obvious. We assume that (1) is an axiom of T. We claim 
that ¢(N) is not a theorem of T. To see this, take a model of the consistent 
theory obtained by adjoining ~D[0j, -D/{1), ~D/2], ... to T and represent ¢ 
by membership in the smallest subset of the universe of the model contain- 
ing the individual representing 0 and closed under the function represent- 
ing S. Then ¢(.N) is not valid in the model, so ¢{N) is not a theorem of T: 
J am grateful to Simon Kochen for this example. 

Now consider a specific number b of the form f(0,....0). where f is 
a function symbol] representing in T the primitive recursive function F. 
All mathematicians apparently believe that it is meaningful to speak of 
the number p such that if f is the term S---SO with p occurrences of S, 
then Fr f=b. To the Cantorian, p exists in a Platonic world; the in- 
tuitionist is convinced that f can in principle be constructed; the finitist 
accepts p because it is finite. But the argument that b is a finite number 
because there is a proof of ¢{b) in p steps is circular-~the number p is itself 
given as F(0,...,0), and how do we know that the putative proof will ever 
terminate? Consider the example that b is SSO {} SSSSSO. What does it 
mean to speak of the term S---SO with 24 5, or 272721727 2, or 2°53 
occurrences of S? This involves the genetic concept of number. But if one 
produces occurrences of S at the rate of one every 107*4 seconds, which is 
about the time it takes light to traverse the diameter of a proton, and if 
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the age of the universe is taken to be twenty billion years, then it will take 
more than 1019°4 ages of the universe before 2 {} 5 occurrences of S have 
been produced (and by the same token, what genetic meaning can 10°6* 
have?). The point is that to regard 2 f} 5 as standing for a genetic number 
entails a philosophical commitment to some idea] notion of existence. To 
a nominalist, 2 {} 4 stands for a number, 65536, to which one can count, 
but 2 {| 5 is a pair of arabic numerals with a vertical double arrow between 
them, and there is not a scintilla of evidence that it stands for a genetic 
number. There is a story of a bank employee who was told to count a 
bundle of bill to verify that there was actually a thousand of them. The 
employee began to count them: 1,2,3,...,61,62,63—and then stopped, 
being convinced that since it had checked perfectly all that way it must be 
correct. 

There are more efficient ways of using the axiom (Fin) than step by step 
as a rule of inference, and we can actually prove ¢(b) for specific numbers b 
much bigger than those we can actually count to. For example, let 


ap = 2, a) = ap + ao, a2 = a, a4, «--, Arg = A45* ALS, 


so that + aig = 2 f 5. Form ¢°(z). Then ¢°(z) respects multiplication and 
is stronger than ¢(z), so one quickly obtains proofs of 


$° (ao), $*(a), ¢*(a2), ce tae ¢* (aie); (2 f 5), 
and so of $(2 7 5). Encouraged by this success, one might expect that for 
every construction of a function symbol f representing a primitive recur- 
sive function, one could constuct an inductive predicate symbol ¢’ stronger 
than ¢ to be used in proving ¢'(f(0,...,0)) and so ¢(f(0,...,0)), but this 
is not so. The reader may enjoy seeing how to construct proofs of the for- 
mulas ¢(2 {} 6), (2 ft 7),...,¢(2 ft 2 4 4) in extensions by definition of T. 
But there are limits to such methods; no one will ever prove ¢(2 ¢ 2 5). 
Proofs ordinarily involve the use of quantifiers, and Hilbert and Ackermann 
showed how to eliminate quantifiers from a proof. When all quantifiers have 
been eliminated, we are reduced to using (Fin) step by step as a rule of 
inference, and so a proof of #(b) with quantifiers eliminated must have at 
least p steps, whére |; # = b. But one can estimate the increase in the 
length of a proof when quantifiers are eliminated, and so obtain a lower 
bound on the length of the original proof. As one can see from this de- 
scription, the argument involves accepting rather large forma] numbers as 
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standing for genetic numbers. The arguments given in this chapter to es- 
tablish Assertions 18.1 and 18.2 are finitary, but no claim is made that they 
can be carried out predicatively. 

By the rank of a formula we mean the number of occurrences of 3 
in it. In the following Assertions we will use proof (in a theory T) to 
mean a sequence of formulas of T each of which is an axiom of T, is a 
tautological consequence of preceding formulas, or can be inferred by 3 
introduction from a preceding formula (see the discussion of induction on 
theorems in [Sh,§3.1]), and a proof of A is a proof whose last formula 
is A. By the rank of a proof we mean the maximal rank of the formulas 
in it. Let Z be the theory whose nonlogical symbols are 0 and S, and 
whose nonlogical axioms are (3.1) and (3.2); ie., Se # 0 and Sz = Sy > 
z= y. Then tg p,; 4 po whenever p; is unequal to p2. We use various 
arithmetical symbols metamathematically, including | for exponentiation 
and + for superexponentiation. 


Assertion 18.1 Let T be a consistent open extension of Z, and let b be 
a variable-free term of T such that ty b # p for all p with p < 2 tt wp. Then 
any proof in T of d(b) of rank 7 has at least 2 ft (u — 2-7 — 3) formulas. 


Argument. Refer to the proof of the Consistency Theorem in [Sh,§4.3]. 
Assume that we are given a proof in T of (b) of rank 7 with n formulas. 
By Lemma 1 of [Sh,§4.3], ¢(b) is a tautological consequence of formulas 
in A(T). Let us examine the proof of Lemma 1 to see how many are 
required. Let F be the smallest function such that for any proof with 
formulas of a formula A in a theory U, any closed instance of A is a 
tautological consequence of F(A) formulas in A(U). Then we have from 


the proof of Lemma 1 that 


F(1)=1 and F(X) < max (= F(@),1+ max ra) 
A=1 


(according as A is an axiom, is a tautological consequence of preceding 
formulas, or is inferred by 3-introduction from a preceding formula). Hence 
F(A) < 2*— 1, and so ¢(b) is a tautological consequence of 2"~' formulas 
in A(T). Let U be the theory T[-¢(b)]; then U is an open inconsistent 
theory, and there is a special sequence (that is, a sequence of formulas 
such that the disjunction of their negations is a tautology) of 2” formulas 
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in A,(U). We let K(v) be the minimal number of formulas in a special 
sequence all of whose formulas are in A,(U). Then K(r) < 27. Since 
2 tt (uw — 2-7 — 3) = Log(2 ft (4-2-7 — 2)) and Log K(r) < n, it suffices 
to show that 2 } (u— 2-7-2) < K(r). 

We claim that 2 {} « < K(0). From a special sequence containing K (0) 
formulas in Ag(U) we obtain, upon deleting the instances of identity axioms 
and equality axioms, a quasi-tautology ~A, V---V—A),, where each A, 
for a from 1 to A is an instance of a nonlogical axiom of U, and A < 
K(0). Since T is consistent, T is consistent, because we can interpret o(z) 
by z = z. Therefore the axiom —¢(b) of U must be one of the A,. Let the 
other formulas among the A, that contain ¢ be (Fin)({b,],..., (Fin)|b,], so 
that y < K(0), and let Ty be 


T|(Fin)/b,],...,(Fin)[b,]]- 
Then we have 


1. Fr, o(b). 


Let B, be the formula bj = pv---Vb, =p. Since T is a consistent ex- 
tension of Z, at most + of the formulas B, are theorems of T. Suppose 
<2}. Then there is a p with p < 2 4 » such that we can consistently 
adjoin -B, to T. But then there is an interpretation I of To in T[=B,| in 
which 


g(t) is z=OVae=SOV---Vze=p; 
in fact, for 8 = 1,...,y we have 


rqy-p,]bg = 0 V be =S0V---Vbg =p > 
Sbp = OV Sbg = SOV -- V Shp 


since -yj.p,] bg # p. Using (1) we obtain a proof in T|-B,] of (b), i-e. of 
b=Ovb=SO0V---Vb =, which is impossible. Thus 2 f} u < 7 < K(0), 
which establishes the claim. 

Consider a special sequence of « formulas. In the proof of Lemma 2 
of [Sh,§4.3], the special sequence is divided into three portions: A, for 
i= 1,...,7; By[aj] > 3xB for 7 = 1,...,p; and 3xB > B,/r], so that 
r+p+1=«. From this a new special sequence is obtained (with the 
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formulas belonging to the special constant r eliminated), and the number 
of formulas in it is r- (p+ 1). Since r+ (p+1) = &, this is at most 
Qt(4,«"). The next time we eliminate formiulas belonging to a special 
constant we get at most Qt(4,«*) (in fact, at most Qt(4°,«‘)) formu- 
las, and when we have eliminated all formulas belonging to special con- 
stants of maximal rank we get at most Qt(4,« 727) formulas. That is, 
4-K(v—1) < K(v) 127 K(v). Let 


L(v) = K(v) + Log(Log K(v) +1) +1. 


Then 4: K(v—1) <2727 L(v-1) and L(v—1) < 27217 L(y). We have 
already seen that 2 ft ¢ < K(0). Therefore 2 + (u— 1) < L(0), so 


2+ (u—3) < L(1),...,24 (uw ~ 2-7-1) < Ls), 


and hence 2 + (4 — 2-7 ~ 2) < K(7), as was to be shown. 

Earlier I said rather dogmatically that no one will ever prove the formula 
¢(2 ft 2 5). Assertion 18.1 gives some evidence for this. Suppose we try 
to prove ¢(2 {} 2 7 5) starting from a consistent extension T of Z to which 
we adjoin (Fin). The theory T may not be open, but by Skolem’s Theorem 
(see (Sh,§4.5]) it has a conservative open extension T°, and each axiom 
of T can be proved rather quickly from the corresponding axiom of T°. 
However, in Assertion 18.1 we used a restricted notion of proof. There 
are various devices, discussed in Chapters 3 and 4 of [Sh], that shorten 
a proof: use of extensions by definition, the Deduction Theorem, special 
constants, and so forth. One has the impression on reading about these 
devices that they shorten proofs by at most exponential factors, which 
are quite negligible in comparison to the bound of Assertion 18.1. This 
impression is worth studying in detail; we will do so later on. For the 
present, let me summarize by saying that I can count to 2 4 4 but not 2 7} 5, 
and I can prove $(2 f} 2 f} 4) but not 6(2 ft 2 4 5). 

Now we turn to the consequences of Assertion 18.1 for the predicative 
theory of arithmetic that we are developing. The reader may have wondered 
why we did not extend the relativization scheme to incorporate 7 instead 
of #. If one looks at the proof of REL in Chapter 5, the natural next step 
would seem to be to let C4 be an abbreviation for Vy(C*{y] > C®ly t zl), 
and then try to establish the further claims 
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16. C4\z| + C[z], 

17. C4/0j, 

18, C4{z] — C4[Sz], 

19. C4{z] &u<2— Cul, 

20. C4[x] & Ctx.) + C4[z, + 29], 

21. C4[z,) & Ctx] = C4[x, - x9], 

22. C4|[x,) & C[x.] + C4[x, T x). 
The trouble in trying to establish (22) is that 7 (unlike +, -, and #) is 
not associative. We cannot in this way extend the relativization scheme to 
incorporate |. This raises the question as to whether some other scheme 
might work, but the following Assertion is that there is no relativization 
scheme incorporating {7 for the generic inductive formula ¢. See also [PD]. 


Assertion 18.2 Let T be a consistent extension of Q). 1: No inductive 
formula of T is stronger than 6(x) and respects }. 2: No inductive formula 
of T is stronger than ¢(2 4 2). 

Argument. Suppose C, is an inductive formula of T that is stronger 
than ¢(r) and respects T, and let C2 be C,{2 f} z]. It is easy to see that 
2F0=1,2F 2740527 Sxr=27 (242), and2}r=0—-2f Sr=0 
are theorems of Qi. Therefore C2 is inductive and stronger than (2 ff x). 
Thus to establish (1) it suffices to establish (2). 

Suppose Cy is an inductive formula of T that is stronger than o(2 4 2). 
Let T° be an open conservative extension of T; this exists by Skolem’s 
Theorem (see [Sh,§4.5!). The formula C3 respects addition, so that 


aa C3[z] + Chix + a). 


Hence the number of formulas in a proof in To of (2 f (2 7 p)) grows 
only linearly with p while the rank remains constant, which contradicts 
Assertion 18.1. Thus Assertion 18.2 holds. 

This result may serve to deepen one’s mistrust of the induction principle. 
There is a barrier separating the predicative from the impredicative, a 
barrier as absolute as that between the genetic and the formal, and more 
sharply delineated than the debatable demarcation between the finite and 
the infinite. 

As syntactical methods for establishing certain inductions have failed, 
we may be tempted to turn to semantics and appeal to the set w of all 
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natural numbers. Of course it is a theorem of axiomatic set theory that 
formalized Peano Arithmetic is consistent, but this is not what people have 
in mind who argue that Peano Arithmetic is consistent because its axioms 
are true statements about w. What is at issue here is not the familiar 
construct of formal mathematics, but a belief in the existence of w prior 
to all mathematical constructions. What is the origin of this belief? The 
famous saying by Kronecker that God created the numbers, all else is the 
work of Man, presumably was not meant to be taken seriously. Nowhere 
in the book of Genesis do we find the passage: And God said, let there be 
numbers, and there were numbers; odd and even created he them, and he 
said unto them, be fruitful and multiply; and he commanded them to keep 
the laws of induction. No, the belief in w stems from the speculations of 
Greek philosophy on the existence of ideal entities or the speculations of 
German philosophy on a priori categories of thought. An appeal to w to 
justify the induction principle is no more secure than are these philosophical 
systems, and yet it is hard to relinquish. We are creatures (Kronecker had 
it backwards), not too much older than an infant in a crib, and we still feel 
the urge to count on something when we count. The infant counts on its 
fingers, the mathematician counts on w—but the infant at least knows its 
fingers to exist. The mathematician’s attitude towards w has in practice 
been one of faith, and faith in a hypothetical entity of our own devising, to 
which are ascribed attributes of necessary existence and infinite magnitude, 
is idolatry. 

We now have an extensive development of predicative arithmetic and 
some idea of its limitations. These limitations were found using the Consis- 
tency Theorem. The proof of the Consistency Theorem is finitary; in fact, 
it was devised with the laudable aim of defending forma! mathematics from 
the attacks of the intuitionists. But can the Consistency Theorem itself be 
established predicatively? More generally, which results of mathematical 
logic can be established predicatively? Using our stringent test of predica- 
tivity as interpretability in @, we can study this question by arithmetizing 
syntax within our predicative theory of arithmetic and seeking predicatively 
to prove arithmetizations of the fundamental results of finitary mathemat- 
ical logic. Let us do this, following [Sh] in shameless detail. It is a long 
journey. Before setting out we may remark that it is doomed to failure. 
The Consistency Theorem can be used to prove the consistency of Q, so if 
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we could establish, within our theory, both it and Gédel’s theorem on the 
impossibility of self-consistency proofs, then we would have a contradiction. 
This indicates that at least one of these two pillars of finitary mathemati- 
cal logic, the Hilbert-Ackermann Consistency Theorem and Gédel’s Second 
Theorem, makes an appeal to impredicative concepts. 

In addition to philosophical objections to impredicative methods, one 
may have mathematical misgivings about their use. Perhaps the place to 
look for possible trouble is not in the upper branches of set theory, but 
rather at the very roots in arithmetic where impredicativity first appears. 


Chapter 19 


Sequences 


In this chapter we will predicatively arithmetize the basic syntactical 
notions of juxtaposition, substitution, and occurrence. 


19.1 Thm. 4zVw f(w) < f(z). 


Proof. We have (19.1):z < f,w < f. Suppose Jf-(19.1). By BLNP 
there exists a minimal such f. Suppose =(f is a function) Vv f = 0, and let 
z= 0. Then (19.1), a contradiction, and thus f is a function & f #0. 
By (12.2) there exists t such that t € f, and there exist z and y such that 
(z,y) = t. Let g = {s © f: s # t}. By the minimality of f there exists 
z, such that Vw g(w) < g{z). Suppose f(z) < f(z) and let z = z. Then 
(19.1), a contradiction, and thus f(z) < f(zi). Let z= z). Then (19.1), a 
contradiction, and thus (19.1). 


19.2 Def. Maxm f = z+ min, Vw f(w) < f(z). 


The existence condition holds by (19.1) and BLNP, the uniqueness con- 
dition is obvious, and we have Jzrhs (19.2):2 < fiw < f. 


19.3 Def. Sup f = f(Maxm f). 


19.4 Def. u is a sequence @ w isa function & JnVi(i is inthe domain of 
ucol<ic<n). 


19.5 Def. Lnu = n ++ u is a sequence & Vi(z is in the domain of u 
1<i <n), otherwise n = 0. 


19.6 Def. Chopu = {z €u:z #4 (Lnu,u(Lnu))}. 
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19.7 Thm. uisasequence & u#0— Chopuisasequence & LnChopu+ 
1=Lnu & 2-Chopu <u. 
Proof. Suppose hyp(19.7). Then Chop is a function and Wi(7 is in 


the domain of Chopu @ 1 <7 < Lnu-—1), so Chop is a sequence and 
Ln Chopu+1= Lnu. We have 2-Chopu < u by (10.20). Thus (19.7). 


19.8 Thm. Lnu < Logu. 


Proof. Suppose Ju-(19.8). By BLNP there exists a minimal such u. 
Suppose 7(u is a sequence) V u = 0. Then Lnu = 0 and so (19.8), a 
contradiction. Thus uw is a sequence & u #0. By the minimality of u 
and (19.7), Ln Chopu < Log Chop u. Since 2- Chop < u we have Lnu = 
Ln Chopu +1 < LogChopu+1 < Logu. Hence (19.8), a contradiction, 
and thus (19.8). 

19.9 Thm. Za(aisaset & Wiliteaci< Logr) & 
a < (730 - (Log z)*) #2). 

Proof. Suppose z = 0 and let a = 0. Then (19.9), and thus (19.9),/0). 
Suppose (19.9). Then there exists a@ such that scope3,(19.9). We have 
Log (z + 1) = Log x — (19.9),|Sz], so suppose Log (z + 1) # Logaz. Then 
Log (z + 1) = Loge +1 and |x + 1j2 = |2-2\2. Let a, = aU {Logz}. Then 
a, is a set and Wi(i € a; ot < Log(z+1)). Let ¢ = 730- (Log (r+ 1))?. 
By (16.2), (16.1), and (16.8), 

a, <5-SPa-146- (Log z)? < 

730 - (Log x)? - ((730 - (Log z)*) #2) < 

lee -(c# 2) = cH (2-2) =c#l2-2), =c#|ze+lp=c# (z+ 1). 
Thus (19.9),{Sz’, and thus ind, (19.9). Hence (19.9) by BI. 
19.10 Def. Setlogz =aeaisaset & Vilic at < Logz). 

The uniqueness condition holds by (12.2), and by (19.9) we have the 
existence condition and Jarhs (19.10): a < (730: (Log (z+ 1))?) #(<+1), 
t < Max(a, Log z). 

19.11 Def. Explogfn(z, y) = f  exp(z, Log y, f). 

The existence condition holds by (14.11) and the uniqueness condition 
holds by (13.2). Suppose exp(z, Logy, f). Let 2 = Max(z,2). There exists 
g such that exp(z, Logy,g). We have f < g by (16.20) and we have g < 
K # (2 - g(Log y)) #(2- g(Log y)) by (16.11). But 
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g{(Log y) = z 1 Logy < 27 ((Logz + 1) -Logy) < 
(2-2) #y = Max(2-2,4)#y. 
Thus we obtain that Ifrhs(19.11):f < K#(2-(Max(2-2,4)#y)) # 
(2 - (Max(2- 2,4) #y)). 
19.12 Def. Explog(z,y) = Explogfn(z, y)(Log y). 
19.13 Thm. Explog(z,y) = 2b". 
Proof. By (16.26). 0 
The point is that although the term z } Log y contains the unbounded 


function symbol 7, it can be written as a bounded function symbol applied 
to z and y. 


19.14 Def. Expln(z,y) = Explogfn(Ln y). 
19.15 Thm. ExpIn(z,y) = 2b"¥, 

Proof. By (19.8). 

19.16 Thm. u is a sequence -> u < (K+ (Lnu- SP Supu)*)', 

Proof. We have con (19.16) «> u < Expln(K - (Lnu - SP Supw)*, uv). 
Suppose Ju—(19.16). By BLNP there exists u such that min, ~(19.16). 
(I hope that no one will object that ( )* involves an unbounded function 
symbol!) Clearly u # 0. Let m = Lnu and let v = Chopu. Then v < 
(K-((n - 1)-SP Sup u)4)""!. We have u = vU {{n,u(n)}}, so by (16.5) we 
have con (19.16), a contradiction. Thus (19.16). 


19.17 Thm. u isa sequence & Lnu<Logy & Supu<z-—- 
u< (2:K-(Logy-SPz)*) #y. 


Proof. Suppose hyp (19.17) and let w = K - (Logy- SPz)*. By (19.16) 
we have u < w | Logy < 27 ((Logw 4+ 1): Logy) < (2-w) #y, and thus 
(19.17). 

Let u, be either a unary function symbol or the empty expression, for 
all « from 1 to vy. We use 


A:ujX1 < ay,...,Uvx_ < ap 


as an abbreviation for A < A’, where A' is the formula obtained by replac- 
ing each part of A of the form 3x,B by Jx,(u,x, <a, & B), for all » from 
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1 to v. Ifall the u, are the empty expression, this agrees with our previous 
notation (see Chap. 7). 

If x occurs in A only in parts of the form Ix(x is a sequence & B)—or 
more generally, if A is equivalent to the formula obtained by replacing each 
part of A of the form 3xB by 3x(x is a sequence & B)—and if we have 


A:Lnx < Loga,Supx < b 

or 
A:Lnx < Lna,Supx <b, 

then it follows from (19.17) and (19.8) that 
A:x < (2-K-(Loga-SPb)*) #a. 


In showing a formula to be bounded, we will usually write one of the former, 
leaving the latter to be inferred. 
Now we introduce juxtaposition. 


19.18 Def. wxv = {(i,y) : 2 © Setlog(u-v) & 1< i < Lnu+Lnv 
& (l<i< inu say = ufi)) & (lnu+1 <7 < Lnut+Lnv 
y = v(t — Lnu))}. 

19.19 Thm. u*visasequence & Ln(u*v)=Lnu+Lnv. 


Proof. Clearly u*v is a function. We have Vi(1 is in the domain of u «vu 
4 1<7i< Lnu+Lnv) since Lnu + Lnv < Log (u-v) by (19.8). 


19.20 Thm. (u+v)*w=ux«(vew). 


Proof. Let | = (u+v) *w and let r = u»(v + w). We claim that 
1: [(2) = r(z). Suppose 2:1 <7 < Lnu. Then /{2) = (u *v)(¢) = u(z) and 
r(z) = u(t). Thus (2) > (1). Suppose 3: Lnu+1<7¢< Lnu-+ Lnv. Then 
l(t) = (wx v)(2} = v(¢ —Lnu) and r(¢) = (v* w)(¢-— Ln u) = v(i - Ln), 
and thus (3) > (1). Suppose 4: Lnu+ Lnu +1 <2 < Lnu+Lnv+ Low. 
Then we obtain (7) = w(i ~ (Lnu + Lnv)) = w(t - Lnu ~ Lnv) and 
r(t) = (v*w)(¢~ Lnu) = w(i~ Lnu — Lnv), and thus (4) > (1). Suppose 
5:1 =O0VLnu+Lnv+bLnw <7. Then I{z) = 0 and r(z) = 0, and thus 
(5) — (1). Hence (1), and by (12.2) we have (19.20). 


19.21 Def. sum(u, v) «+ u and v are sequences & Lnu = Lnv & 
v1) = ull) & Vill <t<Lnu > off + 1) = (2) + u(t t 1)). 
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19.22 Thm. u is a sequence > Jv(sum(u,v) & Supv < Lnu-Supu). 
Proof. We have (19.22):Lnu < Lnu,Supv < Lnu-Supu. Suppose 


Ju-(19.22). By BLNP there exists a minimal such u. Suppose u = 0 and 
let v = 0. Then (19.22), a contradiction, and thus u # 0. Let n = Lnu 
and Jet u; = Chopu. There exists v,; such that sum(u,v)} & Supy < 
(n—1)-Supuy. Let v = v, U {(n,vi(n — 1) + u(n))}. Then sum(u,v). We 
have 


Sup u = Max(Sup v1, v1(n — 1) + u(n)) < 
(n —1)-Supu+Supu =n-Supu, 
so that (19.22), a contradiction, and thus (19.22). 
19.23 Def. Du =v sum(u,v), otherwise v = 0. 
The uniqueness condition holds by (12.17), and we have 
Su rhs (19.23): Lnv < Lnu,Supv < Lnu-Supv. 


Notice that S>u is the sequence of partial sums, and the total sum is 
(SS u)(Lnw). 
19.24 Def. prod(u,v) « wu and v are sequences & Lnu=Lnv & 
vil) =u(l) & Wl <i < Lnu > v(t + 1) = v(2)- u(2 +1). 
19.25 Thm. wu is a sequence > Jv(prod(u,v) & Supv < Expln(Supu,zw)). 


Proof. Suppose Ju-(19.25). By BLNP there exists a minimal such w. 
Suppose u = 0 and Jet v = 0. Then (19.25), a contradiction, and thus 
u #0. Let n = Lnu and let u; = Chopwu. Then there exists v, such that 
prod(w,,v,) & Supv, < (Supu)" 1. Let v =v, U {(n,v,(n — 1) - u(n})}. 
Then prod(u,v). We have 


Supv = Max(Sup4,0;(n — 1)-u(n)) < (Supu)*"!-Supu = (Supu)", 
so that (19.25), a contradiction, and thus (19.25). 
19.26 Def. [Ju =v © prod(u,v), otherwise v = 0. 
19.27 Thm. e(n) o da(aisaset & Vilteaot<n)). 


Proof. Suppose e(n). Then there exists f such that exp(2,n, f). We 
have n = Logf(n). Let a = Setlog f(n). Then rhs (19.27), and thus 
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e(n) — rhs (19.27). Conversely, suppose a isaset & Willie aor<n). 
Let u = {(27,z) : ¢ © a} and let f = J[u. Then exp(z,n,f), and thus 
(19.27). 

Let *++# be obtained from ~- by forming the plural of a noun in —, let a 
be a term, and let x be the first variable in alphabetical order not occurring 
in — or a. Then we write “a is a sequence of «*+” for 


ais asequence & Vx(1 <x <LIna- a(x) isa —). 
Also, we write “a is a set of **%” for 
aisaset & Vx(x€a—-xisa—). 


Let f be a bounded unary function symbol and let a be a bounded term. 
Then we write 


foa for {(x,f(a(x))) :x € Doma}. 


Now we shall introduce the juxtaposition of a sequence of sequences. 
The following two function symbols locate the sequence, and the index in 
that sequence, corresponding to an index in the juxtaposition. 


19.28 Def. Loci(t,s) = 7 < min;i < (Ln c s)(j), otherwise j = 0. 
We have Jj rhs (19.28):7 < Lns. 

19.29 Def. Loce(z,s) = i — (SY Ln o s)(Locy(2,s) — 1). 

19.30 Def. s* = {(,y) : 7 € Setlog(s(Maxm(Ln os))#s) & 1<i 

(Ln cs)}(Lns) & y= s(Loc;(z,s)})(Loce(z,s)}}. 


19.31 Thm. s is a sequence of sequences —+ s* is a sequence & Lns* = 


(Ln o s}(Lns). 


IA 


Proof. Suppose hyp (19.31). Clearly s* is a function. We have 


(Ln s)(Lns) < Sup (Ln o s)-Lns = Ln(s(Maxm(Ln os)))-Lns < 
Log (s(Maxm (Ln o s))) - Log s = Ln {s(Maxm (Ln 0 s)) #5) 
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by (14.20), and so Wi(1 is in the domain of s* 1 <7 < (SD Ln os)(Lns)). 
Thus (19.31). 


19.32 Def. (z) = {(1,z)}. 

Now we introduce substitution and simultaneous substitution. 
19.33 Def. Sub(u,z,v) = {(t,y):2€ Domu & ((u(2)) #2 y = (u(s})) 
& ({u(i)) =z > y=r)}*. 
19.34 Def. Ssub(u,w,s) = {(1,y):7€ Domu & 7aj(1<j <Lnw & 
(u(i)) = w() > y= (u(z))) & Vi(minj (1< 7 <Inw & (u(i)) = w(y) 
y= a(3)))}*. 
19.35 Def. ult,j] = {(k,u(i+k—-1)): ke {k © Domu:1<k < 7-74 ]}}. 
19.36 Def. v occurs inu o WA’ <i<jy<Lnu & v=ult,j)). 
19.37 Thm. v occurs inu > v < u. 


Proof. Suppose v occurs in u. There exist 7 and j such that 1 <1 < 
j<bnu & v=uli,j]. Let 


f={tz,w):z2€u & w= (i + Proj; z — 1,Proj2 z)}. 


Then we have Vz(z € v > z < f{z)) by (16.19). By (12.19) we have v <u. 
Thus (19.37). 

Notice that now that we have bounded replacement, we can dispense 
with FS (Metatheorem 12.1) and use (12.19) instead. 

The proof of (19.37) relies on the fact (16.19) that (x,y) is increasing 
in both z and y. This property fails for the usual set-theoretic definition 
of ordered pair—it takes a sudden dip when x = y. The result (19.37) will 
often be used tacitly in arguments by BLNP. 


19.38 Thm. wisasequence & 1<¢<Lnuw > ull,é—Ieulit+1,Lnu] <a. 


Proof. Suppose hyp (19.38). Let v = u/1,i— 1] * ulé + 1, Unu) and let 


f={(z,w):z2¢v& (Projiz<i-low=2z)& 
(¢ < Proj, z -» w = (Proj, z + 1, Proje z))}. 


Then we have Vz(z € vu z < f(z)) by (16.19). By (12.19) we have v < wu. 
Clearly v # u, so v < u. Thus (19.38). 
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19.39 Thm. w occurs inv & v occurs in u > w occurs in wu. 


Proof. Suppose hyp (19.39). There exist 7, 7, k, and 7 such that v = 
ult,j) & w= vk]. Let i; =i2+k—-1 and let 3, =i+1-—1. Then 
w = ulti, ji]. Thus (19.39). 


19.40 Def. Reverse u = {(i,u(Lnu+1-1)):7€ Domu}. 


Chapter 20 


Cardinality 


A set has to be small in three ways: the formula, describing it must 
be bounded, there must be a bound on its elements, and there must be a 
logarithmic bound on its cardinality. We elaborate on this staternent in 
this chapter and the next. 


20.1 Def. f is injective «+ VzVy(z € Domf & ye Domf & tr #y-> 
f(x) # f(y). 


We use the abbreviations “a is an injective sequence” for “a is injective 
& ais asequence”, and “a is an injective sequence of *«*” for “a is injective 
& ais a sequence of *«*”. 


20.2 Def. wis an injection into a © wu is an injective sequence & Ranu C a. 
20.3 Thm. u is an injection into a — Lnu < Loga. 


Proof. Suppose 3uda—(20.3). By BLNP there exist minimal such u 
and a. Clearly u # 0. Let a) = {cr €a:2 4 u(Lnu)}. Then 2-0, <a 
by (10.20), and Chop u is an injection into a;, so Ln Chopu < Loga, and 
hence Lnu < Loge, a contradiction. Thus (20.3). 

20.4 Def. Carda =n + min, Vu(u is an injection into a > Lnu <n). 

We have dnrhs (20.4): n < Loga, Lnu < Loga, Supu < a. The 
existence condition holds by (20.3) and BLNP, and the uniqueness condition 
is obvious. 
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20.5 Thm. Carda < Loga. 
Proof. By (20.3). 
20.6 Thm, Ju(u is an injection intoa & Lnu = Carda). 
Proof. From (20.4). 
20.7 Thm, r€a& a, ={y€a:y # x} > Carda = Carda, + 1. 


Proof. Suppose hyp (20.7), suppose 1: u is an injection into a, and 
suppose 2; 1<j<Lnu & u(j) =<. Let 


v={(i,y):t€ Domu &1<i<Lnu-1& 
(§<jroy=ult)) & (FG <t>y=ulit I))}. 


Then v is an injection into @, and hence Lnv < Carda,, so that 3: Lnu < 
Carda, + 1. Thus (2) > (3). Suppose 4: Vy(1 < 7 < Lnu — u(y) F 2). 
Then w is an injection into a), so that Lnu < Carda;. Thus (4) — (3), 
and thus (1) — (3). Therefore Carda < Carda,; + 1. By (20.6) there 
exists uw, such that u, is an injection into ay & Lnuw, = Carda,. Let u = 
u,U{(Lnu; +1,2)}. Then wu is an injection into a and Lnu = Carda, +1, 
so Carda,; +1 < Carda. Thus (20.7). 


20.8 Def. Bda = Maxz(r<a& réa). 
20.9 Def. Expcard(z, a) = Explogin(z,a)(Card a). 
20.10 Thm. Expcard(z,a) = 2°", 
Proof. By (20.5). 
20.11 Thm. a is aset as Expcard(730 - (SP Bd a)?, a). 


Proof. Suppose Ja—(20.11). By BLNP there exists a minimal] such a. 
Clearly a # 0, so there exists z such that z € a. Let a, = {yC a:y # Z}. 
Then a; < (730- (SP Bda,)*) | Carda. But a < 730-SPa, - (SPz)* by 
(16.2) and (16.1), so that 


a < (730- (SP Bda)’) - (730 - (SP Bda)?)Cd4 = 
(730 - (SP Bd a)”)°*"42 
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by (20.7). This is a contradiction, and thus (20.11). 
20.12 Thm. f is a function — Card f = Card Dom f. 


Proof. Suppose 3f-(20.12). By BLNP there exists a minimal such f. 
Clearly f 4 0, so there exists z such that z € f. Let a = Domf, let 
fi = {te f:t # z}, and let a, = {s € a: s # Projyz}. Then f, isa 
function, Dom f; = ay, and f; < f, so Card f, = Card a,. But by (20.7) we 
have Card f = Card f; + 1 and Carda = Carda, + 1, so Card f = Carda, 
a contradiction. Thus (20.12}. 


20.13 Thm. ab =0 = Card (aU b) = Carda + Card b. 


Proof. Suppose 4b-(20.13). By BLNP there exists a minimal such 6. 
Suppose -Arz € b. Then aU} = a and Cardb = 0, so con (20.13), a 
contradiction. Thus there exists z such that z € b. Let 6; = {tC b:t $ x}. 
Then aM b; = 0, so Card(aU b,) = Carda + Cardb;. By (20.7) we have 
Card (aU 6) = Card (aU by) +1 and Cardé = Card b; + 1, so con (20.13), a 
contradiction. Thus (20.13). 


20.14 Thm. Je(c is a set & 
Va(z€ceu Irdy(xea & yeb & z= (z,y))) & 
Carde = Carda-Cardb & 
c < Explog(K - (Max(Bd a, Bd4))*, a # 6)). 


Proof. Suppose 4b-(20.14). By BLNP there exists a minimal such 6. 
Suppose yo yo € b and let ¢c = 0. Then (20.14), a contradiction, and thus 
there exists yo such that yo € b. Let 6; = {t © b: t # yo}. Then there 
exists c; such that scopes, (20.14).sjeib1]. Let f = {(z,yo) : x € a} and let 
c=¢,Uf. Now ¢, 1 f = 0, so we have Carde = Carda- Card 6, + Card f = 
Card a- Card b; + Carda = Carda- Card by (20.13), (20.12), and (20.7). 
Clearly ¢ is a set and scope; (20.14). Let k = (Max(Bda, Bd 6))*. 
(16.3) we have Bde < 5 - (Max(Bd a, Bd 8))?, so that 


c < (730-25-k) t Carde = k) ¢ (Carda- Card) < 
(K-k) t (Loga- Loeb) ic ea g (a #6) = Explog(K -k,a# 8) 


by (20.11), (20.5), and (14.20). Therefore we have (20.14), a contradiction, 
and thus (20.14). 
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20.15 Def. axb=cercisaset & VelzeEceodray(xea & yEeb & 
oom (x, y))). 

The uniqueness condition holds by (12.2) and the existence condition 
and boundedness hold by (20.14). 


20.16 Def. Occu = Ran {{k,v):k € Domu x Domy & RAI <i<7< 
Lnu & k=(i,7) & uft,j] = v)}. 
20.17 Thm. v occurs in u > v € Occu. 

Proof. From (20.16). 


20.18 Thm. f isafunction & a= Domf — 
f < Expceard(K - (SP Max(Bd a, Sup f))‘,a). 


Proof. Suppose hyp (20.18). It follows from (20.12) and (20.11) that 
{ < (730-(SP Bd f)?) ? Card a, so by (16.1) and (16.3) we have con (20.18). 
Thus (20.18). 

If x occurs in A only in parts of the form 3x(x is a function & B)—or 
more generally, if A is equivalent to the formula obtained by replacing each 
part of A of the form 3xB by 3x(x is a function & B)—and if we have 


A:Domx < a,Supx <b, 
then it follows from (20.18) and (20.5) that we have 
A:x < Explog(K - (SP Max(a,b))*,a). 


Similarly, if x occurs in A only in parts of the form dx(x isa set & B)-—-or 
more generally, if A is equivalent to the formula obtained by replacing each 
part of A of the form 3xB by 4x(x isa set & B)—and if we have 


A: Bdx < a,Cardx < Logb, 
then it follows from (20.11) and (20.5) that we have 
A:x < Explog(730- (SPa)?, b). 


In showing a formula to be bounded, we will usually write one of the former, 
leaving the bound on x to be inferred. 

The following result shows that if we have a function r on a set (think 
of r as a ranking function), then we can enumerate the elements of the set 
in such a way that those of lower rank come first. 
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20.19 Thm. ais a set > Ju(u is an injection intoa & Ranu=a & 
Wivg(k<i<Lnu & 1<j<Lnw & r(u(t)) <r(uly)) — 7 <9). 

Proof. We have (20.19):Lnu < Loga, Supu < a by (20.3). Suppose 
da-(20.19). By BLNP there exists a minimal such a. Clearly a # 0. Let 
ro = {z © r: Projiz € a} and let rz} = Maxmro. Then 2 € a. Let 
a, = {t€a:t #4}. By the minimality assumption there exists u; such 
that scopes, (20.19)..[usa1]. Let u = wu U{({Lnu, + 1,z)}. Then (20.19), a 
contradiction, and thus (20.19). 


20.20 Def. Enumer(a,r) = u © min, scope, (20.19). 


We have Jurhs (20.20):Lnu < Loga, Supu < Bda. The existence con- 
dition holds by (20.19) and BLNP, and the uniqueness condition is obvious. 


20.21 Def. Enuma = Enumer(a, 0). 


Chapter 21 


Existence of sets 


Metatheorem 21.1 Let Q" be the current theory, let U be an extension 
of Q4, let A be a bounded formula of U, and let a and b be bounded terms 
of U not containing x or y. Then the following ts a theorem of U: 


SET. ¥x(A -+ x <a) & Vy(Vx(x € y — A) > Cardy < Logb) = 
Sy(y isa set & Vx(x€ y+ A)). 


Demonstration. We prove (SET) in U as follows. Suppose hyp (SET). 
Write a for 


y < Explog(730 - (SPa}’,b) & y is a set & Vx{x € y - A), 


and let y= Maxya. Clearly ay(0], so by MAX we have a. Suppose 
A&x¢y and let y;=yU{x}. (Here y; is distinct from x and y and 
does not occur in A, a, or b.} By (20.11) we have ayly;|, a contradiction, 
and thus ¥x(x € y > A). Thus (SET). G 

We have developed a certain amount of set theory, but it is only a small 
portion of Cantorian set theory; see Figure 21.1. Different mathematicians 
who study the foundations of mathematics incorporate different portions 
of set theory into their metamathematica] belief system. Platonists discuss 
whether measurable cardinals exist, but they believe in R;. In some sense 
intuitionists believe in w while finitists believe only in the elements of R,,, 
though it is difficult to make a strict comparison. 
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The ordinals are depicted on the vertical azis, and the portion of the figure 
lying strictly below the horizontal line through the ordinal a depicts the 
set R, of all sets of rank <a. Here i ts the first inaccessible cardinal and 
m ts the first measurable cardinal. The figure is not drawn to scale. 


Figure 21.1: Cantor’s Paradise 
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Set theory is abstract, but abstract beliefs affect concrete actions. Some- 
one who believes in R, would consider it a waste of time to try to produce 
a contradiction from the axioms of ZFC; similarly for R,.2 and Zermelo’s 
original axiomatic set theory with separation but without replacement; and 
similarly for #,41 and Peano Arithmetic. 

To a nominalist it is clear where to draw the line separating the real 
from the speculative: Rs, which is a system of 65536 objects, exists—-but Re, 
with its 2 {| 5 members, is only a formal construct. 


Chapter 22 


Semibounded replacement 


This chapter is a digression, and I do not intend to use it in the sequel 
except in occasional remarks. The semibounded replacement principle dif- 
fers from the bounded replacement principle of Chapter 17 in that JSyD is 
no longer required to be bounded, though D itself is. 


Metatheorem 22.1 Let D be a bounded formula of Q4 such that 2,...,Z, 
are the variables distinct from x and y occurring free in D. Consider the 
formula 


SBR. aisaset & Vz(réa-> JyD) — 
Af(/ isa function & Domf=a & vz(réa-— D,|f(z)])). 


Then Q4|(SBR)} ts interpretable in Q4. 


Demonstration. Let D, be min, D. We want to construct the function f 
with domain a such that for z € a we have f(x) = y if and only if D,. How 
do we know such a function exists? Write ¢{n] for 


Vavr,-:-Va,(aisaset & Carda<n & Vz(z€a— dyD) > 
Sf(f isafunction & Domf=a & Ya(rE€a-+Dj))). 


We claim that ind, ¢|n|. Clearly ¢/0}]. Suppose 


gin] & aisaset & Carda=n+1 & Ve(re€a-— dyD). 
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There exists z such that z € a. Let a9 = {t € a: t # z}. Then there 
exists fy such that fo is a function & Domfy = ay & Vr(z € a > 
D,)}. Since z € a we have Sw D,,|zw], so by BLNP there exists w such that 
Dyzy|zw]. Let f = fo U {(z,w)}. Thus ¢{n] > ¢[n + 1], and the claim is 
established. 

Since ¢ is inductive, we can form ¢* and apply SREL of Chapter 15. 
Then we have ¢*[a] — ¢*/Carda], and so ¢*[a] — ¢[Card a], since Card is a 
bounded function symbol. Therefore we have 


la] & aisaset & Vz(r Ea — dyD) > 
Af(f isafunction & Domf=a & Vzr(z€ a —Dy)) 


and a fortiori 


1. tla} & aisaset & Vz(rea— Fy(¢*[y] & D)) > 
Af(f isafunction & Domf =a & Vz(x€a-—Dy,)). 


Suppose hyp(1). Then there exists f such that scopez;con(1). By 
(20.18) we have 


f < Expcard(K - (SP Max(Bd a, Sup f))*, a). 


But Sup f = f(Maxm/f). Let 2 = Maxmf. Then z € a, so Jw{¢4/w] & 
D,,/2w|), so there exists w such that ¢4[w] & Dj,,/zw]. That is, ¢*[f(z)] 
and so ¢*|/Sup fj. Consequently we have ¢*|f], and thus 


2. ¢4[a] & aisaset & Va(re€a— Fy(c*[y] & D)) > 
3f(s4\f] & fisafunction & Domf=a & Vz(rxéa—D)). 


But (2) is equivalent to the relativization of (SBR) by ¢‘. 

Therefore we have an interpretation I of Q{{(SBR)] in Q{ constructed 
as follows. The universe U, of I is given by Uyn © ¢4[n]. For each bounded 
symbol u of the theory, uy is u. For each unbounded symbol u of the theory, 
uy is the symbol whose defining axiom is given by the relativization by ¢* 
of the defining axiom of u. 0 

We can always introduce a function symbol by means of the defining 
axiom 


100 22. SEMIBOUNDED REPLACEMENT 


SBRD! {(z,y): 2 €a & min, D} = f + f isafunction & 
Domf =a & Va(z € a — (miny D),[f(z)]), otherwise f = 1, 


even if D is unbounded, since the uniqueness condition holds. If D is 
bounded and we have SBR, such defining axioms are useful. 

The theory obtained by adjoining all axioms of the form (SBR), with 
D bounded, is locally interpretable in Q, but we will continue to work only 
in extensions by definition of Q4. 


Chapter 23 


Formulas 


Now we are ready to begin to investigate which results of finitary math- 
ematical logic can be established predicatively. We will follow the presen- 
tation in |Sh] very closely. See |Sh,§2.4] in connection with this chapter. 

It will be convenient to enlarge our stock of variables. We also let A, 
B,C,and D- possibly with 0, 1, 2,...as a subscript—be variables, and if 
x is a variable we let x’ be a variable. The notion of alphabetical] order is 
understood to be suitably redefined, with the relative order of the old vari- 
ables being unchanged. Generally speaking, our notation in arithmetizing 
syntax will correspond to the notation we have been using, following |Sh], 
for metamathematical discussion, and we will often use primed variables to 
suggest sequences of expressions, but formally all variables remain on an 
equal footing. 

We will introduce predicate symbols arithmetizing the syntactical no- 
tions of variable, predicate symbol, formula, etc. There should be no con- 
fusion between the formal use of these predicate symbols and the informal 
use of the same terminology in talking about expressions. 

Our first task is to introduce the various kinds of symbols. 


23.1 Def. X, = ({2,n}). 

23.2 Def. x is a variable + Snz = Xy. 

23.3 Def. Fran = ((3,(n,m))). 

23.4 Def. f is a function symbol © inam f = Fim. 
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23.5 Def. Pam = ((4,(n,m})). 

23.6 Def. p is a predicate symbol + Inimp = Py m- 
23.7 Def. + = ((5,0)). 

23.8 Def. V = ((5,1)). 

23.9 Def. 3 = ((5,2)). 

23.10 Def. 


ill 


= P20. 


23.11 Def. u is asymbol < u is a variable Vu is a function symbol V vu is 
a predicate symbo] Vu =A Vu=VVu=i. 


We will tacitly use the theorem that these disjuncts are mutually exclu- 
sive. 


23.12 Def. u is a logical symbol © w is a variable V u = 
u=VVued. 


23.13 Def. u is a nonlogical symbol « u is a symbol & -(u is a logical 
symbol). 


23.14 Def. ¢ is a constant 4 Ime = Fom.- 
The index of a symbol! tells how many arguments it takes: 


23.15 Def. Indexu =n © Jmu=Fram VImuU= Pam V(u=7 & n=1) 
V(e=V & n=2)V (u=Jd & n= 2), otherwise n = 0. 


23.16 Def. u is an expression +» wis a sequence & VWifl <7 < Lnu - 
(u(z)) is a symbol). 


23.17 Thm, u is a symbol + u is an expression & Lnu = 1. 


Proof. Suppose u is a symbol. By inspection of the defining axioms, 
u is a sequence and Lnu = 1, so that u = (u(1)) and uw is an expression. 
Thus lhs (23.17) — rhs (23.17), The converse is clear. 0 

Next we want to arithmetize the notion of a term. The usual definition 
is a generalized inductive definition: an expression is a term in case it is 
a member of the smallest set of expressions containing the variables and 
closed under the application of v-ary function symbols to v-tuples from the 
set, for all vy. We can relativize this definition to the set of all expressions 
occurring in a given expression, because to see whether an expression is 
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a term it is not necessary to look beyond the expressions occurring in it. 
This is a pattern that we will follow on several occasions. 


23.18 Def. Termsu = Mins(s < Occu & (1) & (2)), where 

1. Va(z € Occu & z is a variable > z€ s), 

2. VfWu'(f is a function symbol & v! is a sequence of expressions & 
Index f =Lnv' & Rano'Cs & fev'* €Occu > fxv'* Es). 


23.19 Def. u is aterm + u € Termsu. 
23.20 Thm. v occurs in u > Termsv C Terms u. 


Proof. Suppopse v occurs in. u and let s; = Termsv 1 Termsu. Then 
it follows that scopeyin (23.18),y[81v], so Termsv < s; < Termsv. Thus 
(23.20). 


23.21 Thm. ais aterm > Vi(1 <i < Lna - (a(z)) is a variable Vv (a(1)) 
is a function symbol). 


Proof. Suppose a is a term and let 
$s, = {u € Terms a: con (23.21),[ul}. 


Then scopemin (23.18) su[S1@], so $; = Termsa. Thus (23.21). 


23.22 Thm. a is a term + a is a variable V 3fa'(f is a function symbol 
& a’ is a sequence of terms & Index f=Lna’ & a= f xa"). 


Proof. Suppose a is a term and let 
8; = {u € Terms a: rhs (23.22),/ul}. 


Then scopemin (23-18) 5u[$14], and consequently we have s; = Termsa. Thus 
ths (23.22) + rhs (23.22). Conversely, suppose rhs (23.22). Clearly ais a 
variable — a is a term, so suppose scope 3q' (23.22). By (23.20), Rana’ © 
Terms a. Thus a is a term, and thus (23.22). 


23.23 Thm. Termsu = {a € Occu:a is a term}. 


Proof. Let s = {a € Occu: ais a term}. Then scopeyin (23.18), so 
Terms u C s. Suppose a € s. Then a € Termsa, so a € Terms u by (23.20). 
Thus s © Terms zu, and so (23.23). 
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23.24 Thm, e is a constant — e is a term. 


Proof. Suppose e is a constant. Then scope3,: (23.22) ,.:/e0], and thus 
(23.24). 


23.25 Def. A is an atomic formula «+ Jp3a'(p is a predicate symbol & @ 
is a sequence of terms & Indexp=Lna’ & A=pxa'*). 
23.26 Def. Formulasu = Mins(s < Occu & (1) & (2) & (3) & (4)), 
where 

1. VA(A € Occu & A is an atomic formula > A € s), 

2. VA(A Es &Ha+AE Occu > 3* A E8), 

3. VAVB(ACs & BEs&V+¥A+ BE Occu > Ve A+ BES), 

4. VAVz(AEs & cisavariable & J*xr*¥A€ Occu + 242% AEs). 
23.27 Def. u is a formula © u € Formulas u. 
23.28 Thm. v occurs in u -+ Formulasv € Formulas uw. 


Proof. Suppose v occurs in u and let s; = Formulas vNFormulas uv. Then 
scopemin (23.26),y/51v), so Formulas v < s; < Formulas v. Thus (23.28). 


23.29 Thm. A is a formula > A is an expression. 


Proof. Suppose A is a formula and let 
8; = {u € Formulas A : con (23.29) 4[u}}. 


Then scopemin (23.26) ..[3,A], so s; = Formulas A. Thus (23.29). 


23.30 Thm. A is a formula — A is an atomic formula V 3B(B is a formula 
& A=3+B) v IBIC(B and C are formulas & A= V*B*C) v 32d B(r 
isa variable & Bisaformula & A= 4% 2% B). 


Proof. Suppose A is a formula and let 
8, — {u € Formulas A : rhs (23.20) 4{u)}. 


Then scopemin (23.26) .u/$1A], 80 6; = Formulas A. Thus /hs (23.30) —» 
rhs (23.30). Conversely, suppose rhs (23.30). Clearly A is an atomic for- 
mula -— A is a formula, so suppose B and C are formulas & z is a variable 
& (A=S*BV A=VkB*C V A= Je2%B), By (23.28), A is a formula. 
Thus A is a formula, and thus (23.30). 
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23.31 Thm. Formulasu = {A € Occu: A is a formula}. 


Proof. Let s = {A € Occu: A is a formula}. Then scopeyj, (23.26), so 
Formulas u € s. Suppose A € s. Then A € Formulas A, so A € Formulasu 
by (23.28). Thus s C Formulas u, and so (23.31). 


23.32 Def. u is a designator ++ u is a term V u is a formula. 
23.33 Thm. u is a designator -+ Ju'(u' is a sequence of designators & 
Index (u(1)) =Lnw’ & w= (u(1)) «u'*). 

Proof. By (23.22) and (23.30). 0 

We want to prove the uniqueness of u'; this is the formation theorem. 
23.34 Def. uy; and uz are compatible «+ u, and uz are expressions & 
dv(v is an expression & (ug = uy *v V wy) = uz *v)). 
23.35 Thm. uy and ug are compatible > u, and wz are expressions & 
Wi(l<i<cinu & 1<i< Law > u(t) = ua(z)). 


Proof. Clearly ths (23.35) > rhs (23.25). Suppose 1: rhs{23.35) & 
Lnw, < Lnwo, and let v = u2/Lnu, + 1,Lnu;). Then uz = vu) *v, and thus 
(1) -> [hs (23.35). Therefore rhs (23.35) & Lnu, < Inu, > [hs (23.35), 
and so (23.35). 


23.36 Thm. u,*v, and uz *v2 are compatible —+ u, and uz are compatible. 
Proof. By (23.35). 
23.37 Thm. u * v, and u * ve are compatible — v, and v2 are compatible. 
Proof. By (23.35). 
23.38 Thm. wu’ isa sequence & Vi(1 <i <Lnu' > a(t} #0) - Lnu'< 
(Lu')(Ln uw’). 
Proof. Suppose ju'+(23.38). By BLNP there exists a minimal such w’. 
Clearly u' 4 0. Then Ln Chopu! < (3> Chop u’) (Ln Chop w’), so con (23.38), 


a contradiction, and thus (23.38). 


23.39 Thm. u! and v! are sequences of designators & Luu’ =Lnv' & u'* 


and v'* are compatible + u! = v'. 


(See Lemma 1 of {Sh,§2.4].) Proof. Suppose (23.39). Write a for 
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7(23.39)wor[uyey] & ul* occurs in ul & 
vi* occurs in v'* & m=Lnu}*. 


Observe that 


Sui dela: Linu, < Lau’, Supu, <u, 
Lnv, < Lnv'™, Sup, <v'* 


by (23.28) and (19.31). We have Armdu} dv} a (let wi = u’, let vj = v', and 
let m = Lnu!*), so by BLNP there exists m such that min,, Ju43v! a, so 
of course there exist uj and vj such that a. Let n = Lnw}, so that also 
n= Lnvj. Let vu, = Chop uj and Jet v, = Chopv}. Clearly n 4 0. We have 
ul* = u}* «ul (nr) and vi* = u}* «u\(n). Since ul* and v{* are compatible, 
u,* and v,* are compatible by (23.36). Since n # 0 we have Lnu}* < 
m, so by the minimality assumption we have u = v) and consequently 
ul,* = v}*. By (23.37), ui(n) and vi(n) are compatible. Let u = u{(n) and 
let v = vj(n). By (23.33), there exist w' and z’ such that w' and z' are 
sequences of designators & Index (u(1)) = Lnw' & Index (v(1)) = Ln! 
& u= (u(i)aw™ & v = (vo(t)) «2'*. By (23.36), {u(1)) and (v(1)) are 
compatible, so that u(1) = v(1). By (23.37), w'* and z'* are compatible. 
Also, w'* occurs in u’* and 2z'* occurs in u'*, and Lnw'* < m. By the 
minimality assumption, w! = z' and so u = v; that is, u\(m) = v\(n). We 
have already seen that uj, = v}; that is, Chopu, = Chopuj. Therefore 
ul, = vj, a contradiction, and thus (23.39). 


23.40 Thm. (formation theorem) u is a designator > 3!u'(u! is a sequence 
of designators & Index (u(1)} =Lnu! & u= (u(1))*u'*). 


Proof. We have the existence by (23.33). Suppose wu is a designator & 
ui and wu are sequences of designators & Index (u(1)) = Lau = Lna) 
& w= (u(1)) ui" = (u(1))*uh*. By (23.37), ul,* and u,* are compatible, 
so ul = uy by (23.39). Thus (23.39). 


23.41 Def. Argu = ul ++ uisadesignator & u! is a sequence of designators 
& Index (u(1)) =Lnu’ & w= (u(1))+*u'*, otherwise wu! = 1. 


The uniqueness condition holds by (23.40), and we have Su’ rhs (23.41): 
Lnv’ < Lnu, Supw! < wu. 
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23.42 Thm. u and v are designators & u and v are compatible > u = v. 


Proof. Suppose hyp (23.42). Then (u) and (v) are sequences of desig- 
nators, Ln (u) = Ln (v) = 1, (u)* = u, and (v)* = v, so by (23.39) we have 
(u) = (v). Hence u = v, and thus (23.42). 


23.43 Thm. u is a designator & 1<2< Lnu - Aj(i<7<Lnu & 
ult, j] is a designator). 


(See Lemma 2 of [Sh,§2.4].) Proof. Suppose dudi7(23.43). By BLNP 
there exist minimal such u and 7. Suppose « = 1 and let 7 = Lnu. Then 
con (23.43), a contradiction, and thus ¢ # 1. Let v' = Argw and let v, = 
((u(1))) *v". Recall (19.28) and (19.29), and let & = Loc, (7, vj) and let 7) = 
Loce(t, v,). Then v'(k) <u and t; < 7, so by the minimality assumption 
there exists 7; such that 1) < 9) <u'(k) & v'(k)lt1, "| is a designator. Let 
jp =14+j,-%. Then ul7,j] = v'(k)[21, 4] and so con (23.43), a contradiction, 
and thus (23.43). 


23.44 Thm. (occurrence theorem) u is a designator & 1<i<j<Lnu 
& ult,j} is a designator > ult,j) = u V 3k35 57 (1< k < LnArgu & 
1<4 <9, < Ln ((Argu}(k)) & uli,7] = (Arg u)(k)[t1,71]). 

Proof. Suppose hyp (23.44). Suppose i = 1. Then uj?,j| and u are 
compatible, so ult, j] = u by (23.42). Thus ¢ = 1 -> con (23.44), so suppose 
771. Let ul = Argu, let vo’ = ({u(1))) # uw’, let & = Locy(t,v'), and let 
%) = Locg(t,v). By (23.43) there exists 7, such that 11 < 3) < Lnu'(k) 
& w'(k}[t:,91| is a designator. Then uit, 7] and w'(k)|21, 91] are compatible, 
so uli,j] = ul(k)|ea, 71] by (23.42). Thus ¢ # 1 > con (23,44), and thus 
(23.44). 


23.45 Def. ¢ is a bound occurrence of z in A «+ z is a variable & A 
isa formula & (A(i))= 2 & SB5j(Bisaformla & 1<j<i< 
jgt+24+ I nB<LnA & Alj,j+2+LnB] = 4+2* B). 


23.46 Def. i is a free occurrence of z in u « zis avariable & uisa 
deignator & (u(z)) =a & ~(7 is a bound occurrence of z in wu). 


23.47 Def. x is bound in A + 32(z is a bound occurrence of z in A). 


23.48 Def. x is free in u «> Fi(7 is a free occurrence of z in w). 
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When we substitute terms for variables in a formula, we do so only 
for free occurrences of the variables, so we introduce the following defining 
axioms: 


23.49 Def. Subfr(u,z,a) = {(2,v) : i € Domu & (-(@ is a free occurrence 
of cin u) + v = (u(2))) & (¢ is a free occurrence of z in u > v = a)}*. 


23.50 Def. Ssubfr(u, z',a') = {(t,v):1€ Domu & (nA(l<j<Lnd & 
1 is a free occurrence of z'(j) inu) > v= (u(2))) & Vj(minj(1 <j < Lana’ 
& 7 is a free occurrence of z'(7) in u) > v = a'(j))}*. 


23.51 Def. uz[a] = v < (1) V (2), otherwise v = 1, where 

Jl. uis a designator & x is a variable & aisaterm & v = 
Subfr(u, z, a), 

2. wis a designator & z is an injective sequence of variables & a is 
a sequence of terms & Lnzx=Lna & v = Ssubfr(u,z,a). 


23.52 Thm. u is a designator & ((z is a variable & a is a term) V 
(x is an injective sequence of variables & a is a sequence of terms & 
Lnz = Lna)) - (u,[a] isa term ou isaterm) & (uz[a! is a formula 
+ wu is a formula). 


Proof. Suppose Sudzja—(23.52). By BLNP there exist minimal such u, 
z, and a. Let u! = Argu and let 


u, = {(k,u'(k),/a]) +k © Domu}. 
Then by the minimality assumption we have 
Vk(1<k < Lnu! — con (23.52),\u'(k)]). 


Suppose (u(1)) is a variable. Then Index (u(1)) = 0, so Lnu = 1 and 
u = (u(1)). But then u,[a] is a term, so con (23.52), a contradiction. Thus 
~((u(1)) is a variable). Suppose (u(1)) # 3. Then u,fa] = (u(1)) + u)* 
and so con (23.52), a contradiction. Thus (u(1)) = =, so there exist y 
and B such that y is a variable & Bisa formula & u = J*y+B, 
so that u'* = y* B. Suppose 1: (z is a variable & x # y) V (risa 
sequence of variables & y ¢ Ranz). Then again u,/a] = (u(1)) « u* 
and so con (23.52), a contradiction. Thus 7(1). Suppose 2: z = y. Then 
uz[al = wu, so con (23.52), a contradiction. Thus 7(2). Therefore x is 
a sequence of variables & y € Rana. Then there exists 7 such that 
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1<yg<inz & 2(j) = y. Let 2 = 21,7 — 1) + zy +1,Lna] and let 
a, = a[l,j — i] * aj +.1,Lna}. By (19.38), rz, < xz and a; < a, so by the 
minimality assumption we have con (23.52) uza{B2z14@,|. Since x is injective, 
y ¢ Ranz. Hence u,[a] = J+ y * B,,[ai|, so con (23.52), a contradiction. 
Thus (23.52). 


23.53 Def. a is substitutable for z in A aisaterm & 1 is a variable 
& Aisaformula & VyVBViVjVk(y is a variable & yoccursina & B 
isaformula & 1<i<j<k<LnA & Ali,kl=Jey*B> aA(jisa 
free occurrence of z in A)). 


23.54 Def. a’ is simultaneously substitutable for z' in A — a’ is a sequence 
of terms & 2! is an injective sequence of variables & Lnz' = Lna’ & 
Viti <i <Lnz' — a'(2) is substitutable for x'(7) in A). 


Now we introduce some function symbols that enable us to write for- 
mulas more compactly. 


23.55 Def. ~=A=C 4 Aisaformula & C = 5% A, otherwise C = 1. 


23.56 Def. AVB =C + Aand B are formulas & C = V+ Ax B, otherwise 
C=1. 


23.57 Def. tA =C + risavariable & Aisaformula & C = J+A, 
otherwise C = 1. 


23.58 Def. VrA = *ar7A. 
23.59 Def. ATSB = SAVB. 
23.60 Def. AKB = =(ASSB). 
23.61 Def. ATSB = (AS B)&(BA). 
23.62 Def. a=b = C — a and bare terms & C = = «a+b, otherwise 
C=1. 
23.63 Def. aZb = 7(ab). 
We need to express iterated disjunctions, implications, and conjunc- 


tions, associated from right to left. 


23.64 Def. Dis} A’ = {(i,u):2€ DomA' & (i = Ln A! > u = A'(Ln A’)) 
& (¢<LnAl a u=Ve Al(r))}*. 
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23.65 Def. Impl A’ = {(i,u):2€ Dom A’ & (7 = Ln A’ + u = A'(Ln A')) 
& i <InA oa u=Ves« Ali))}*. 

23.66 Def. Conj A' = {ti,u):¢@ DomA! & (i= Ln A’ > u= A'(Ln A?) 
& (¢< Un Al + ua a%V «5% A(t) #5)}*, 

, 23.67 Thm. A’ is a sequence of formulas & A’ #0 & A = A'(1) 
& B' = A'l2,Ln A’; — Disj A’, Imp! A’, and ConjA!' are formulas & 
(Ln A’ = 1 — Disj A! = Impl A’ = ConjA' = A) & (Ln A’ #1 > 
Dis) A’ = AVDisj B’ & Impl A’ = ASsImplB! & Conj A! = A&Conj B'). 

Proof. Suppose 3A'~(23.67). By BLNP there exists a minimal] such 
A', Suppose Ln A! = 1. Then Disj.A’ = Impl] A’ = Conj A’ = (A)*, but 
A is a sequence and so (A)* = A, a contradiction. Thus Ln A’ # 1. 
Then Disj A’ = V+ A * Dis] B’ = AVDis} B’, and Impl A’ = V+a* Ax 
Impl B' = +AVImp! B! = ASImpl B’, and Conj A = S*¥Vx5% Axa 
Conj B' =-=(ASConj B') = A&Conj B'. This is a contradiction, and 
thus (23.67). 

Using this theorem, we see that if a is (A,) * (Ag) + --- * (AL), then 
we have: a is a sequence of formulas — Disja = A,VAqV---VA, & 
Impla = A,}A,55---A, & Conja = Ay&A,&---KA,. Unless the 
contrary is stated, a binary operation is associated from right to left when 
restoring parentheses; for example, AS BSC is AS (BSC). 


23.68 Def. u is variable-free <> u is an expression & Wi(1 <i<Lnu - 
~((u(2)) is a variable)). 


23.69 Def. A is a closed formula +» A isa formula & Vi(1<7<LnA— 
“(i is a free occurrence of (A{z)) in A)). 


Chapter 24 


Proofs 


We give a predicative arithmetization of the predicate calculus. We 
modify the treatment in |[Sh,§2.6] by adopting tautological consequence as 
a rule of inference; see the conclusion of [Sh,§3.1]. 


24.1 Def. B is a substitution axiom «+ JA3xia(q is substitutable for z in 
A & B=A,[a|=irA). 
24.2 Def. B is an identity axiom «> dr(x is a variable & B= r=z). 
24.3 Def. Equals(z’,y') = {(2,2"(1)=y'(7)) 12 € Doma}. 
24.4 Def. B is an equality axiom © =2'Jy'(z’ and y’ are sequences of 
variables & Lng’ =Lny' & {(1) Vv (2))), where 

1. Sf(f is a function symbol & Index f= Lnz’ & 
B = Imp! (Equals(z', y') + (fez!* = fry!*))), 

2. dp(p is a predicate symbol & Indexp=Lnz' & 
B = Impl (Equals(z', y') + (pea!* Spty'*))). 
24.5 Def. B is a logical axiom © B is a substitution axiom V B is an 
identity axiom V B is an equality axiom. 


24.6 Def. v is a truth valuation on u + Domv = Formulasu & Ranv C 
{O}U{1} & VB(>B € Formulasu > o(=B) =1—v(B)) & YBYC(BYC 
€ Formulas u — v(BYC) = Max (v(B),v(C))). 

24.7 Def. Aisa tautology @ A isa formula & Vo(v is a truth valuation 
on A — v(A) = 1). 
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We have rhs (24.7): Domv < Formulas A,Supv < 1. 


24.8 Def. A is a tautological consequence of A’ «+ A is a formula & A’ is 
a sequence of formulas & Impl (A' * (A)) is a tautology. 


24.9 Def. C can be inferred from D by J-introduction ~ dz AIB(z is a 
variable & A and Bare formulas & —(z is freein B} & D= ASB & 
C = 32(A>B)). 

24.10 Def. 1 is a language < / is a set of nonlogical symbols. 

24.11 Def. Nisu = Ran {(z,v) :7 € Domu & v = (u(t)) & vis a nonlogical 
symbol}. 

24.12 Def. aisatermofl -aisaterm & NisaCl. 

24.13 Def. A isa formula of 1 4 Aisaformula & NisA CI. 

24.14 Def. t is a theory + Jids(l is a language & s is a set of formulas 
of 1 & t= U,s)). 

24.15 Def. Langt =1 > tis atheory & | = Proj, t, otherwise / = 1. 
24.16 Def. Axt=s > tisatheory & s = Projet, otherwise s = 1. 


The arithmetical nature of logic is revealed by the fact that Lang and 
Ax determine a theory. 


24.17 Def. D' is a proof in t of A + D! is a sequence of formulas of Langt 
& D40& D(inD')=A & Vill <i< LnD' — A'(2) is a logical 
axiom Vv A'(i) € Axt V A'(2) is a tautological consequence of A'[1,27 — 1] Vv 
aj(1 <j <a & A'(2) can be inferred from A'(j) by 3-introduction)). 
24.18 Def! A is a theorem of t ~ 4D'(D! is a proof int of A). 
Throughout this book I have been quibbling about exponential bounds 
being unsatisfactory, but here is a predicate symbol that is utterly un- 
bounded. This is the fascination of mathematics. 
24.19 Def. fi, = {2 © f : Proj, z € s}. 
24.20 Thm. A’ is a sequence of formulas & A' #0 & visa truth valuation 
on Disj A’ > (v(Disj A!) = 1 Ai(1<i<LnA' & o(A'(z)) = 1)). 


Proof. Suppose 4A'Iv—(24.20). By BLNP there exist minimal such A’ 
and v. Let A = A'(2), let B! = A'[2,Ln A'], and let vo = %/FormulasDisj B'- 
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Clearly B’ # 0, so we have con (24.20) 4:,[B'vo]. But by (23.67) we have 
v(Disj A’) = Max (v(A), v(Disj B')), so con (24.20), a contradiction, and 
thus (24.20). 


24.21 Thm. A'is asequence of formulas & A' #0 & visatruth valuation 
on Impl A’ > (v(Impl A’) = 1 6 dill <i <Lnd’ & vf{A'(2)) = 0) v 
v(A'(Ln A’)) = 1). 

Proof. Suppose 3.A'3v—(24.21). By BLNP there exists minimal such A’ 
and v. Let A = A'(1), let B = A'[2,Ln A], and let vp = v/Pormutasimp! BI 
Clearly B' # 0, so we have con (24.21) 4.[|B’vo|. But by (23.67) we have 
v(Impl A’) = Max (1 ~ v(A),v(Impl B’)), so con (24.21), a contradiction, 
and thus (24.21). 


24.22 Thm. Al is a sequence of formulas & A' #0 & visa truth valuation 
on Conj A’ > (v(Conj A’) = 1 Vi(1 <2 < Ln A’ = v(A'(2)) = 1)). 


Proof: Suppose 3.A'Jv7(24.22). By BLNP there exist minima] such 
Aland v. Let A = A'(1), B’ = A'l2,Ln A’], and let vo = v) Formulas Conj 5! 
Clearly B' # 0, so we have con (24.22) 4,[B'vo]. But by (23.67) we have 
v(Conj A‘) = »(A) - v(Conj B’), and so con (24.22), a contradiction, and 
thus (24.22). 


24.23 Thm. A! is a sequence of formulas & A is a formula — A is a 
tautological consequence of A’ « (Impl (A’ # (.A)}). 


Proof. Suppose hyp (24.23) and let B = Impl (A’* (Impl (A’*(A))) «(A 
Suppose v is a truth valuation on B & v{B) = 0. Then, by (24.2 
v(A) = 0, Vi(1 < ¢ < Ln A’ = v(A'(z)) = 1), and v{Impl (A' * (A4})) = 
But this contradicts (24.21), and thus B is a tautology. Thus (24.23). 
24.24 Thm. A' isa sequence of formulas & Ran A’ C OccC & visatruth 
valuation on C — Jvo(vp is a truth valuation on Impl A’ & Wi(l <i < Ln A’ 
— v9(A'(i)) = v(A'(2)))). 

Proof. We have (24.24): Domo < Formulas Impl A’, Sup vp < 1. Sup- 
pose 3A'>(24.24). By BLNP there exists a minimal such A’. Clearly 
Ln A’ > 2. Let A = A'(1) and let B! = A'/2,Ln A’]. Then there exists 
v1 such that 


)). 
1), 
1. 


scopexy, (24.24), 41/01 B’]. 
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By (23.67), Impl A’ = A=Imp] B’. Let 


vo = {{B,z): B © Formulas Imp] A’ & 
(B = Impl A’ > z = Max (1 ~ v(A), v1 {Impl B’))) & 
(B=5A72z=1-v(A)) & 
(B € Formulas A> z= v(B)) & 
(B < Formulas Impl B! > z = v;(B))}. 


By the occurrence theorem (23.44), Domzvg = Formulas Impl 4’, and we 
have con (24.24), a contradiction. Thus (24.24). 


24.25 Thm. A is a tautological consequence of A’ & 8B’ is a sequence of 
formulas & Ran A'C Ran B' — A is a tautological consequence of B’. 


Proof. Suppose hyp (24.25) and suppose v is a truth valuation on 
Imp|(B’ + (A)) & v(Impl (B' * (A))) = 0. By (24.21), v(A) = O and 
vil <i < LnB' — o(B(i)) = 1). Therefore Vi(1 < 1 < Ln A’ -> 
v(A'(z)) = 1). By (24.24) there exists up such that vg is a truth valuation 
on Impl (A’* (A)) & Will <i < Ln A! v(A'(2)) = 1) & v(A) = 9. 
This contradicts (24.21), and thus con (24.25). Thus (24.25). 

24.26 Thm. A is a tautological consequence of A’ & Wi(1 <i <UnA' 
D"(i) is a proof in t of A'(?)) & A is a formula of Langt + D"* « (A) is 
a proof in t of A. 

Proof. By (24.25). O 

Using semibounded replacement, we can prove 1: A is a tautological 
consequence of A’ & Vi(1 <i < Ln A’ > A'(z) is a theorem of t) & A 
is a formula of Langt -» A is a theorem of ¢. The proof goes as follows. 
Suppose hyp (1). Using SBRD, Jet 


D" = {(t,D'): 1€ Dom A’ & minp(D' is a proof in ¢ of A'(z})}. 


By (24.26) we have con (1), and thus (1). We need semibounded replace- 
ment to know that a sequence of theorems has a sequence of proofs! 


Chapter 25 


Derived rules of inference 


The material in [Sh,§§3.2-3.5} is concerned with derived rules of infer- 
ence. Straightforward arithmetizations of all of these results are theorems 
of our theory. All of these derived rules of inference can be expressed by 
bounded function symbols. All of the induction arguments in these sections 
of [Sh] are bounded, with one exception—and an alternate predicative proof 
can be given for it. The reader who is willing to accept these conclusions 
should read on for a few paragraphs, where some notational conventions 
are introduced, and then skip the remainder of this lengthy chapter. 

Sometimes in the course of the proof of a theorem (€) we will write: 
define y =a. We do this only when y does not occur in a and a is a 
bounded term, Let x;,...,x, be the variables in a, in the following order: 
first those occurring free in (€) in the order of their occurrence in (€) and 
then the remaining ones in the order of their occurrence in a. Then we 
regard “define y = a” as an abbreviation for 


Def. yeX1...Xp =Y Cy =a. 


This is the defining axiom of a bounded function symbol ye. Within the 
proof of (€) after the introduction of the function symbol ye, we use y 
as an abbreviation for the term yex,...x,. This device, especially when 
iterated, saves us from constantly having to display the arguments of the 
function symbols. The theorem (£) itself may contain function symbols of 
the form ye; this may seem odd, but it allows us to introduce the defining 
axioms of the function symbols at the natural point in the exposition. 
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Observe that if x and z do not occur in A, then 
MIND’. Minx A =z © min, A,(z], otherwise z = 0 


is the defining axiom of a function symbol, since the existence and unique- 
ness conditions hold automatically. It may or may not be a bounded func- 
tion symbol, and if it is a bounded function symbol then its defining ax- 
iom (MIND’) is equivalent to a defining axiom of the form (MIND). If we 
ever have occasion to use this notation to introduce a function symbol for 
which no claim is made that it is bounded, a “!” will indicate this, but 
the intention is to use (MIND’) to save writing obvious bounds explicitly. 
Whenever a term of the form Minx A occurs, it is understood that the cor- 
responding defining axiom of the form (MIND') has been adjoined to the 
theory. 
If x occurs in A only in the part xB, then we write 


define x as in A 


define x = Minx B. 


We write “define y; = a,,...,Y, = a,” for “define y; = a1, ..., and define 
y, = a,”. We write “define x},...,x, as in A” for “define x; as in A, ..., 
and define x, as in A”. 

If we have formulas labeled u for \ < wp < v, and terms a, for’ <p <p, 
we write 


define y = a, in case (yz), forA<u<v 
for 
define y = Miny(((A) > y =a) & --- & ((v) + y =a,)). 


25.1 Def. D': A’ A D' is a proof in (Nls A'* « A,Ran A’) of A. 


25.2 Thm. D': A'F A & Aisa formula of Langt & W(1l<i<LnA' 
C"(z) is a proof in ¢ of A'(’)) + C"* « D! is a proof in t of A. 


Proof. By (24.25). 
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Now we give some results on quantifiers, following [Sh,§3.2}. 


25.3 Thm. (V-introduction) A and B are formulas & 2 is a variable & 
=(z is free in A) > Di, ,(A,B,2z): (ASB) F ASVrB. 


Proof. Define D! = (A&B) * (SBS3%A) + (cS BSA) « (ASVzB). 
25.4 Thm. (generalization) A isa formula & = is a variable — 
D3; 4{A, 2): (A) b VarA. 

Proof. Define D' = (A) * (ASV) « (Ar ASVaA) * (VrA). 
25.5 Thm. a is substitutable for x in A > Dj, ,(a,z, A): (A) F A, fal. 
_ Proof. Define D' = (A) * Djs 4(A,z) * (VzA) « (~A,[a]52%A) + 
(VeAA,/a]) + (A,fal). Gi 

Notice that (A) and (VA) are already contained in Dj, ,(A,z), but this 
redundancy makes the proof somewhat easier to read. 


25.6 Thm. (substitution rule) a! is simultaneously substitutable for 2’ in A 
— Dh, (a',2'A): (A) F Aya’). 

Proof. Define 

yl = (4, Xorpere age) 21 € Domz'}, 

Ay = {(t, Asnis-yfy'[1,¢ - 1]}):¢€ Doma’ U {Lnz’ + 1}}, 

By = {(t, Das s(y' (4), 2'(4), Ag (2))) 27 € Dom z'}*, 

B= Aziy'), 

Al = {(i, Bys y/a'[l,t~ 1]]}:t€ Domy' U {Lny' + 1}}, 

By = {(4, Dos 5(a'(t), u'(2), Ay (2))) +7 € Domy'}*, 

D' = By * Bh. 
Suppose hyp (25.6). We have Vi(1 <7 < Lng’ - y'(1) is substitutable 
for x'(z) in Aj(i) & a'(z) is substitutable for y'(i) in Aj (1), so by (25.5) 
we have Bj: (A) } Band Bi: (B)+ Byla']. But By[a’] = A,{a'|, so 
con (25.6) and thus (25.6). 
25.7 Def. Ao is an instance of A © Jz’Ja‘(a’ is simultaneously substitutable 
for 2’ in A & Ap = Az la’]). 


25.8 Thm. Ao is an instance of A > D), g(Ao, A): (A) E Ap. 
Proof. Define z' and a’ as in (25.7), and define D’ = D), ,(a',2', A). 
25.9 Def. Exist 2! = {(1,3*2'(i)):i€ Domz'}*. 
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25.10 Def. Allz' = {(i,5 4 4+#2'(i) «5):7€ Domz'}*. 


25.11 Thm. z' is a sequence of variables & A is a formula > Existr' + A 
and Allz' « A are formulas. 


Proof. Suppose Jz'4(25.11). By BLNP there exists a minimal such z'. 
Clearly Lnz’ > 2. Let x, = 2'[2,Lnz']. Then Exist x, * A and Allz} « 
A are formulas, but Exist z' + A = Sz'(1)(Exist 2, * A) and Allz'* A = 
Ye'(1)(All 2’, + A), so con (25.11), a contradiction. Thus (25.11). 


28.12 Thm. Aisaformula & z isa variable > Di, .(A,x): OF VrATA. 

Proof. Define D! = (=ATS2%A) + (VaASSA). 
25.13 Thm. (substitution theorem) a’ is simultaneously substitutable for z’ 
in A + Cy, 13(@', 2! A): OF Ayla] Exist c’+ A & 
Dh g(a’, 2', A): OF Alla! x AS Az[a]. 

Proof. Define 

B’ = {G, Exist c'[Ln 2’ ~ 7+ 2,Ln2'] * AS Exist z’[Lnz’ — 24 1] * A): 
1€ Domz’}, 

C' = B'« D), .(a', 2', ASExist 2’ « A), 

Bo = {{i, yg yo(All z'[t, Ln z'] + A, z'(2)}) 1 € Domz'}*, 

D! = By* Dy; q(a'.', Alla! * ASA). 
Suppose hyp(25.13). Then B € Ran B! — B is a substitutuion axiom, so 
Bi: 0+ ASExist 2! * A. By (25.12) and (24.25), Bj: OF Allz’* ASA. By 
the substitution rule (25.6) we have con (25.13), and thus (25.13). 


25.14 Thm. (distribution rule) A and B are formulas & x is a variable — 
Cop. 14(A,B,z): (ASB) F 3tASIcB & 
Dig 44(A, B,2): (ASB) & YrASVrB. 


Proof. Define 


C! = (ASB) (BS IrB) « (AS I2B) « GrAs3zB), 7 
7 D = Dy 2(A, x) + (Vr.ATs A) * (ASB) + (VZASB) * Di; (VzA, B, 2) * 
(VctAVrB). 


25.15 Def. Free A = Enum {z € Occ A: z is free in A}. 
25.16 Def. Closure A = All Free Ax A. 
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25.17 Thm. (closure theorem) A is a formula — Cy, 47(A): (A) © Closure A 
& Dy 17(A): (Closure A) F A. 


Proof. Define z' = Free A, 


C! = (A) « {(i, Dh, (All? + 1,Ln2'] * A,z'(7))) :i€ Domz}*, 
D! = (Closure A) * Ds 13(2', 2’, A) * (A). 


Now we take up the deduction theorem; see [Sh,§3.3]. 


25.18 Thm. B is a tautological consequence of B' & Aisa formula & 
C' = {(t, AB'(t)) : 1 © Dom B'} — ASB is a tautological consequence 
of CT. 


Proof. Suppose hyp (25.18), let C = Impl(C’ + (AB)), and suppose 
v is a truth valuation on C. Suppose 1: v(B) = 1 v v{A) = 0. Then 
v(A7B) = 1, so v(C) = 1 by (24.21). Thus (1) > v(C) = 1, so suppose 
o(B) =0 & v(A) = 1. By (24.21) there exists vp such that vo is a truth 
valuation on Impl(B’* (B)) & Vi(l <i < Ln B! > u9(B'(2)) = v(B'(2))) 
& vo(B) = v(B). We have vo(Impl(B’ * B)) = 1, so by (24.21) there exists 
asuch that 1 <i < LnB’ & w,(B'(1)) = 0. Hence v(B'(i}) = 0, so 
v(AB'(t)) = 0, and again by (24.21), v(C) = 1. Thus o(C) = 1, thus C 
is a tautology, and thus (25.18). 
25.19 Thm. A and B are formulas & B’: A’ FASB 
Dys i9(A, B, BY): Al x (AYP B. 

Proof. Define D! = (A) * B’ * (B). 
25.20 Thm. (deduction theorem) A is a closed formula & 
Bl: Ale (A) B > Dig o(A, BY): ATE ASB. 

Proof. Define C' = {(2, A“ B'(z)) : 7 € Dom B'}. We distinguish three 
cases: 

1. Bl(2) € Ran A’ V B'{1) is a logical axiom, 

2. B'(i) = A v B'(2) is a tautological consequence of B'|1,7 — 1], 

3. 2j4254C3D(x is a variable & C and D are formulas & -~(z is free 
inD) & 1<j <i & Bi) =C3D & Bi) = 320D). 
Define 7, z, C, and D as in (3), and define 

Dy = (Bia) « (AS B(1)), 

Dy = (ASB'(1)), 
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' Di = (ASC D) « (CS ASD) « ArOS AD) « (ASIZCSD), 

Dy = Dj, in case (u), for 1 <p < 3, 

D! = {(t, Dh) : 7 € Dom B'}*. 
Suppose hyp (25.20), and suppose 1 < 7 < Ln B’. Observe that (3) — 
52073 ASD can be inferred from C7% ASD by 3-introduction, since (3) 
— (zis free in A“*D). Thus 1 <2 <LnB'— Dj: A'+C"[1,7-1] F C'(2), 
and so con (25.20). Thus (25.20). 

How can one tell by looking at a finitary argument whether it admits a 
predicative arithmetization? A typical finitary argument, used to show that 
a certain kind of formula can be proved, introduces (perhaps implicitly) a 
ranking of formulas and reduces the proof for a given rank to the case of 
lower ranks, which are assumed to be already proved. To see whether such 
a reduction to previous cases can be constructed predicatively, we must 
examine the totality of previous cases and see if it is a set in the sense of 
our theory. There are three possible obstacles: 

i. A splitting of cases may arise, leading to an exponential (or worse) 
growth in the total number of previous cases. 

ii. There may be an exponential (or worse) growth in the size of the 
objects involved in the previous cases. 

iii. The formula that specifies the previous cases may be unbounded. 

Each application of the deduction theorem increases the length of a 
proof by a factor (which is < 4), so if we try to convert a proof of a formula B 
from a sequence A! of n closed formulas into a proof of Impl(A’ * (B)} by 
induction on n, as in [Sh,§3.3], the length will grow exponentially. Here we 
have an example of the obstacle (ii). This induction is unbounded, and we 
must find another argument. 
25.21 Thm. A’ is a sequence of formulas & 1 <i < Ln A’ = Conj A‘ A'(1) 
is a tautology. 

Proof. Suppose hyp (25.21) & visa truth valuation on Conj A‘ A'(2) 
& v(Conj A's A'(z1)) = 0. Then v(A'(2)) = 0 and v(Conj A’) = 1. But this 
contradicts (24.22), and thus (25.21). 
25.22 Thm. A' is a sequence of formulas & A’ #0 & A isa formula ~> 
Impl(A’ * (A))=5(Conj A'™ A) and (Conj A’ A)SImpl(A! * (A}) are tau- 
tologies. 

Proof. Suppose hyp (25.22), let C = Impl(A’ * (A)), and let D = 
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Conj A'S A. Suppose v is a truth valuation on C3D & v(CSD) = 0. 
Then v(D) = 0 and v(C) = 1. Therefore v(A) = 0 and v(Conj A’) = 1, 
so by (24.22), Vi(1 <i < Ln A’ > 0(A'(2)) = 1). By (24.21), vo(C) = 0, a 
contradiction, and thus CD is a tautology. Suppose v is a truth valuation 
on DSC & v(D3C) = 0. Then v(C) = 0 and v(D) = 1. By (24.21), 
v(A) = 0 and Vi(1 <i < Ln A’ = v{A'(2)) = 1). By (24.22), o(D) =0,a 
contradiction, and thus D5C is a tautology. Thus (25.22). 

25.23 Def. Cases A' = {(1,Conj A’ A'(t)) : 7 € Dom A’}. 


25.24 Thm. A' is a sequence of formulas & Bisa formula & 
Bi: Ay & Impl(A’ « (B)) > Djs o4(A', B, BY): Ag * AIP B. 

Proof. Define D' = A'« B'(B). Suppose hyp (25.24). Then con (25.24) 
by (25.23). Thus (25.24). 


25.25 Thm. (corollary to the deduction theorem) A! is a sequence of closed 
formulas & B': Ay* A’ B — Dy .,(A',B'): Ay F Impl(A’ # (B)) & 
(A' #0 — Ch, .;(A', B'): Ag F Conj A'S B). 

Proof. We distinguish two cases: 1. A‘ = 0 and 2. A’ # 0. Define 


C! = Dhs 99(Conj A', Cases A’ * B’), 

D, = B', 

Di = C' « ((Conj A‘ B)Impl(A’ + (B))) + (Impl(A’ * (B})), 

D' = Di, in case (u), for 1 <p <2. 
Suppose hyp (25.25). Then (1) — con (25.25), so suppose (2). By (25.21), 
Cases A! + Bl: Ay + (Conj A‘) F B. Then Cl: Ay + ConjA'SB by the 
deduction theorem (25.20). By (25.22), Dj: Aj - Impl(A' + (B)), and thus 
(2) — con (25.25). Thus (25.25). 


25.26 Thm. e' is asequence of constants & x' is a sequence of variables & u 
is a designator — (Ssub(u,e’,z') isa term «+ uisaterm) & (Ssub(w,e’.2') 
is a formula « u is a formula). 


Proof. Suppose Ju-(25.26). By BLNP there exists a minimal such u. 
Let u' = Arg wu and let 


ul = {(i,Ssub(u’(2),e',2')) :¢ € Dom}. 


Then by the minimality assumption we have 
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Wi(1 <i < Lnu, — con (25.26), [a4 (2)]). 


Suppose (u(1)) is a constant. Then Index (u(1)) = 0, so Lnu =1 and u= 
(u{1)). But then Ssub(u,e',z’) is a term, so con (25.26), a contradiction. 
Thus 7((u(1)) is a constant). Therefore Ssub(u,e', x’) = (u(1)) « u,* and 
so con (25.26), a contradiction. Thus (25.26). 


25.27 Thm. e' is a sequence of constants & 2! is a sequence of variables 
& Aisa tautology > Ssub(A,e',z’) is a tautology. 


Proof. Suppose hyp (25.27) and let Ay = Ssub(A,é’,2'). Suppose v% is 
a truth valuation on Ap and let 


= {(B,v9(Ssub(B,e',z'))) : B € Formulas A}. 


Then v is a truth valuation on A, so v(A) = 1. Therefore vo(Ao) = 1 and 
thus Ag is a tautology. Thus (25.27). 


25.28 Thm. (theorem on constants) e' is an injective sequence of constants 
& gz’ is an injective sequence of variables & Lnz' = Lne’ & A’isa 
sequence of formulas & A is a formula & Ranen Oce(A"* *A)=0 & 


Bi: Alb Azle] + Dis og(e', 2’, A, B'): AEA, 
Proof. Define 


y= {@, Xesergacares) 27 € Dome'}, 
C' = {(j, Ssub(B’(7), e', y’)) : 7 © Dom B’}, 
D' = C'» Das o(z',y', Ae [y']). 


Suppose hyp(25.28). Observe that Ssub(A,/e oy) = Aly). By 
fa") = 


"\,e 
A, we have con (25.28) by 


(25.27), Cl: ATF Ag ly']. Since (Ay[y'])y 
(25.6), and thus (25.28). 

25.29 Thm. A and B are formulas & e' is an injective sequence of con- 
stants & zs’ = FreeA & Luz’ = Lne & A’ is a sequence of formulas 
& Rane’ Occ(A* +A» B) = 0 & Bi: Als (Aplel]) © Bulel] > 
Dhp o9( A, Bye, 2’, Al, B'): AT ASB. 


Proof. Define 


Cl = Dos 9o( Aa fe'|, BY, A’), 
D= c' , Dy. ale, x, AB, Cc’). 
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Then (25.29) by the deduction theorem (25.20) and the theorem on con- 
stants (25.28). 0 

Now we take up the equivalence and equality theorems, following the 
discussion in (Sh,§3.4]. This is a dull topic; Shoenfield remarks that it can 
be roughly summarized by saying that equivalent formulas and equal terms 
may be substituted for one another. 

We want to treat the notion of one formula being obtained from another 
by replacing some occurrences in it of formulas from a given sequence by 
the corresponding formula in another given sequence. We do this by means 
of another arithmetized relativized generalized inductive definition. 


25.30 Def. Replacements(A, Ai, B’, By) = 

Min s(s < Formulas A x Formulas A, & 

VBVB,((B, By) € Formulas A x Formulas A, & ((1) v --- v (5)) > 
(B, By) © s)), where 


1B= By, 

2.3(1<1<LnB' & B= Bl) & By = Bi), 

3, ACIC(B = =C & B, = 3C, & (C,C,) € 5), 

4, JCAIDIC\VID (B= CVD & B= CVD, & (C.COjyes & 
(D, D1) € s), . 7 

5.jcJB3C(risavariable & B=drC & By = drCy & (CC) € s). 
25.31 Def. replace(A, A;, B', By) @ A and B are formulas & B' and By 
are sequences of formulas & Ln B’=LnB, & 
(A, Ay) € Replacements{A, Ay, B’, Bj). 
25.32 Thm. (distribution rule for equivalence) A and A, are formulas & 
zis a variable > Cy, 3,(A,Ay,2): (ASA) F axAGdrAy & 
Db552(A, Ar, 2): (APSA1) © Vt ASSVr Ay. 

Proof. Define 

C! = (ASA) # (AT$A)) * Chy y(A, Ary) + GAT Ay) * (Ay A) + 
C45 i4(A, Ai, 2) * (Av-A AA) + (GtAPS2Ay), _ 

D! = (A®5 Aq) * (ATS Aq) * Dig yy(A, 41,2) # (VBA VEA)) * (AISA) * 
Dhs 4(A, Ar, 2) * (VA, SVZA) « (V2ABVrA)). 
25.33 Def. Equiv(B', Bi) = {(1, BB, ())) : 1 € Dom B'}. 
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25.34 Thm. (equivalence theorem) replace(A, Ay, B’, B}) > 
D)3.94(A, Ax, BY, By): Equiv(B', B)) & AA). 

Proof. Define 

So = Ran {(z, Proj; 2Projzz): z € Replacements(A, Aj, B’, By)}, 

r = {(Ao, Ln Ao) : Ao € So}; 

A!’ = Enumer(so,r). 
We distinguish two cases: 

1. 223C3C\(z is avariable & (C,C,) € Replacements(A, Aj, B', BY) 
& Al(t) = izC32C), 

2. -(1). 
Define z, C, and C, as in (1), and define 

Cy = Chs.a2(C, Ci, 2), 

Cy = (A()), 

C' = C,, in case (u), for 1 <p < 2, 

D' = {,C') <1 € Dom A’}*. 
Suppose hyp (25.34) and suppose 1 < 7 < Ln A’. We have (1) — Cj: 
Equiv(B’, By) * A'[1,z — 1) F A'(t) by (25.32). We have (2) - A'(i) € 
Ran Equiv(B’, Bj) v A'(2) is a tautological consequence of A’[1,7— 1), so 
(2) + Ch: Equiv(B’, By) * All,i-—1})F A(z). Thus con (25.34), and thus 
(25.34). 0 

Using semibounded replacement, we can prove replace(A, A,, B', Bi) & 
Vi(1<i< Ln B' > BIS Bi (I) is a theorem of t) + AA, is a theorem 
of t. 
25.35 Thm. Bisa formula & xzand y are variables & (t= y V ~(y is 
free in B)) > Dig 45(B,z,y): OF sxBeSsyB,/y). 

Proof. Define 
_ Dt = (Bely] 2B) + Gy B.[y| 2B) « (BS 2yB,[y)) + 
(2B sy B,[y]} + (S2BSJyB,[y]). 
Suppose hyp (25.35). Then y is substitutable for z in B. Observe that 
B4yB,[y] is a substitution axiom, since B = (B,/y]),/z]. Thus (25.35). 


25.36 Def. replace:(A, Ai, D,Di) @ A, Ai, D, and D, are formulas & 
Wajy(l<i<j7<inA & D=Ali,j| & 
Ay = All,¢ —1] * D, * Aly + 1,Ln A). 
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25.37 Thm. C € Formulas A & C, € Formulas A, — 
Replacements(C, C,, B’, Bi) C Replacements(A, A1, B', Bi). 

Proof. Suppose hyp (25.37), let s; = Replacements(C,C,, B', Bi), and 
let s = Replacements(A, Ai, B’, By), so scopesin (25.30) 4 4,,6(C,C1, $M $1) 
and 5; <sMs; < 8). Thus (25.37). 

25.38 Thm. replace;(A,4,,.D,D,) ~ replace(A, Az, (D), (D1)). 

Proof. Suppose JA3A;—(25.38). By BLNP there exist minimal such A 

and A;. Clearly D # A. By the occurrence theorem (23.44), there exists 


k such that 1 < k < Index (A(1)) & D occurs in (Arg A)(k). By the 
minimality assumption, 


replace((Arg A) {(k), (Arg A1)(k),(D), (Di). 


By (25.37) we have (25.38), a contradiction, and thus (25.38). 


25.39 Def. A, is an immediate variant of A > JrJyiB(z and y are variables 
& Bisaformula & zoccursin A & y occurs in Ay & B occurs in A 
& (rx=yv —(y is free in B)) & replace;(A, Ai, 2B, yB,|y])). 

25.40 Thm. A, is an immediate variant of A > Dlg 4)(Ay, A): OF AGA). 

Proof. Define z, y, and B as in (25.39) and define 

D! = Ds s5(B,2,¥) + Das.a4(A, As, (3B), FyBz[y)}). 

25.41 Def. Aj is a variant of A — JA'(A' is a sequence of formulas & 
1<LnA'<LndA & All)=A & A(Lnd) = A, & Vill <i < Ln! 
— Ran A'(it) CRanAURan A; & Ln A'(it)=Ln A) & Will <i< Ln A! 
— A'(i +1) is an immediate variant of A’(z))). 

We have rhs (25.41): Ln A’ < Ln A, LnSupA’ < Ln A, SupSupA’ < 
Max(Sup A, Sup Aj). 

25.42 Thm. A! is a sequence of formulas & A’ #0 — A'(1)SA'(Ln A’) is 
a tautological consequence of Equiv(A'{1, Ln A’ — 1], A'[2, Ln A’). 

Proof. Suppose 3A'~(25.42). By BLNP there exists a minimal such A’. 
Clearly Ln A’ # 1. Let AQ = A‘[/i,Ln A’— 1}. By the minimality assumption 
we have (25.42) 4:/Aj]; that is, A’(1)A'(Ln A’ ~ 1) is a tautological conse- 
quence of Equiv(A'{1, Ln A’ — 2), A'/2,Ln A’ — 1]), But A’(1)# A’(Ln A’) is 
a tautological consequence of 
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(A'(1)4A'(Ln A’ — 1)) « (A'(Ln A! — 1)&A'(Ln A’), 
so con (25.42), a contradiction, and thus (25.42). 
25.43 Thm. (variant theorem) A, is a variant of A > 
Dyy 43(A1, A): OF APA). 
Proof. Define A’ as in (25.41) and define 
D! = {(, Dos yo(A'(i +1), A'(2))) + 1 € Dom A'[1, Ln A’ — 1]}* « (AF A)). 
25.44 Thm. Aisaformula & wis an expression — Bzs44(A,u) is a variant 


of A & Va{z € Occu — ~(z is bound in Bos 44{A,u)) ) & Vu(v € Occu 
— Bos.4s(A,u) = Bos ga{A,v + u)). 

Proof. Define 

i= Enum{i¢ Dom A: A'(i) CRanuw & (A(i-1)) = 4}, 

J’ = {(k,j):ke€ Dom? & Aji’(k) + 1,J] is a formula}, 

C! = {(k, A[i"(k) + 1, 7'(k)|) :& € Dom7'}, 

zw’ = {(k, (A{i'(k))}) :& € Dom?’}, 

s = {x € Occu: z is a variable}, 

y! = {(k, Xasete) tke Dom?#"}, 

1, A’ = Min A(LnA'=Ln'+1 & A)=A & 
vVE(I<k< Ln? > A(k+ 1 = 
AN(K) (1, 2(k) ~ 2) + 3 y!(k) + Caray (¥(A)] + 4'G9(9"(8) + 1,L0 4), 

Bi = A'(Ln A’). 
Suppose hyp (25.44). Then scopeyn (1): Ln Ab < Luz’ + 1, Ln Sup A’ < 
Ln A, Sup Sup A’ < Max(Sup A,Supy’). Suppose 1 < k < Lnz’. Then it 
follows that A'(k +1) is an immediate variant of A'(k). Thus B is a variant 
of A, and thus (25.44). 


25.45 Thm. (symmetry theorem) a and } are terms — 
Dy 4s(a, 6): OF a&=bFsb=a. 


Proof. Define 

D! = (X92 XS Xo= Xo KXo= Xp FM = Xo) # (Ko=Xo) * 
(Xo=XyX =o) * Dog g(a=bbZa, Ko= Ky Xi =Xo) + (a@=HSOZa) » 
Di, (b=a ab, X02 XX, =X) * (b=aa=b) * (a=bSb=a). 
25.46 Thm. ais aterm — Dts 4,(a): OF a%a. 

Proof. Define D' = (XoXo) * Dhs.g(a%a, Xo=Xo) * (@=a). 
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25.47 Thm. f is a function synbol & c’ and c; are sequences of terms & 
Index f = Lne = Lnel, > Di, ,(f,c',c,): Equals(c',cl)  fuel*= frey*. 

Proof. Define 

z= {i1, X,)t € Domc'}, 

zy = {(t, Xinesi: 2? © Dome}}, 

Dy = Imp\(Equals(z', 24) * (f*er'*=fxr}*)), 

D! = Equals(c’, c,) * (Do) * Dhs g(e! * cl, z' * x, Do) * (fxel* = fecl*). 
25.48 Thm. pis a predicate symbol & c' and c, are sequences of terms & 
Index p = Lne' = Lae, > Diy 4s(p,¢',¢,): Equals(c',c,) F pre!* pre} *. 

Proof. Define 


a’ = {(i,Xj;):1¢€ Dome'}, 
wy = {(, Xiaeys) 22 © Domey}, 
Do = Impl(Equals(z', 24) * (pxa!* Spxz'*}), 
Di, = Equals(e!,ci) * (Do) * Dis ge! * c,2' * 2, Do) * (pxel* Spee} *), 
Dy = {(4, Dy 5(c'(t), €)(4))) 27 € Domec’}*, 
D! = Di * Dy + (Di)oe, (ere!) * (pee!* Spee} *). 
25.49 Def. Substitutions(u,u1,a',a,) = Mins(s < Occux Occu, & 
Voor ((u,0)) € Occu x Occu, & v and v, are designators & ((1) Vv (2} 
Vv (3)) — (v,v)) € s)), where 
lov=v, 
231 <l<Lne & veal) & v, =a;,(I)). 
3. v(1) = (1) & ((v(1)) = 4 > v(2) = u1(2)) & 
Va(1 <7 < Ln Index (v(1)) > ((Arg v) (2), (Argvi)(2)) € s). 
25.50 Def. substitute(u,ui,a’,a,) +> u and uy are designators & a! and 


a‘, are sequences of terms & Lna'’=Lna, & 
{u,ui) € Substitutions(u,u,,a’, a4). 


25.51 Thm. (equality theorem for terms) 6 and 6, are terms & 
substitute(b, 6),a',a,) > Dos 5,(b, 61,0", a4): Equals(a’, a) | 6&6. 
Proof. Define 
So = Ran {(z, Proj) z=Projoz) : z € Substitutions(b, b,, a’, a{)}, 


r = {(Ap, Ln Ag) : Ao € 80}, 
A’ = Enumer(sq,r), 


128 25. DERIVED RULES OF INFERENCE 


c= {i,c):1€ DomA’ & Fe, A'(i) = c=}, 

ce = {(tje1) :i€ Dom A! & Je A'(t) = cXey}. 
We distinguish three cases: 

1. (7) =e} (2), 

2. '(t)=e,(z) € Ran Equals(a’, a4), 

3. (1) & =(2). © 


5 = Dos ar(e'(2) (1), Arg (c'(z)), Are (€,(2))), 
C' = Ci, in case (4), for 1 < p< 3, 
D' = {4i,C') :1 € Dom A’}*. 
25.52 Thm. a! and aj are sequences of terms & Lna’=Lnaj & (v,11) € 


Substitutions(u, u;,a’,a,) -> (v and v; are terms V v and v are formulas) 
& substitute(v, v, a’, a4). 


Proof. Suppose hyp (25.52), let s = Substitutions(u, u;,a’,a\), and let 
$1 = {z€ 8: con (25.52),,,,|Proj, z, Proj z/}. 


Then we have scopemin(25.49) [81], 80 8; = s. Thus (25.52). 


25.53 Def. u~v = A (u and v areterms & A = u=v) V (u and v are 
formulas & A= uv), otherwise A = 1. 


25.54 Thm. (equality theorem for formulas) A and A, are formulas & 
substitute(A,A,,a',a,) > Dos s4(A, Ai, a’, a4): Equals(a’,a,) - ASSAy. 
Proof. Define 
so = Ran {(z, Proj, z~Proj2 z) : 2 € Substitutions(A, Ai, a’, @4)}, 
r = {(Ao, Ln Ap) : Ao € So}, 
A’ = Enumer(s,7), 
v= {(i,v) ste Dom A! & Fv, v~ry}, 
vy = {(@,m) 12 € DomA' & Ju v~vy}. 
We distinguish four cases: 


1. v'(t) and vj(z) are terms, 
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2 (9(1) & v(2) = 14 (2)) v (oA) = =v (u'(a}(1)) = Y, 
3.0 (@) # v(t) & (v'(i)(1)) is a predicate symbol, 
4. v'(i) Z offi) & @'()Q)) = 3 
Define 
Oy = Dy si(v'(2), v1 (2), 0, a4), 
Cz = (A'(?)), 


Cy = Drs.ga((v'(i) (1), Arg (v'(2)), Arg (v{(z))), 
Cy = Dbs.so(v'(i)[3, Ln v'(2)], v4 (4) |3, Ln v4 (2)}, (v’(7)(2))), 
C' = Ci, in case (uz), for 1 <p <4, 
= {(i,C) :7€ Dom A'}*. 
25.55 Thm. v occurs in u & v; occurs in uy > Substitutions(v, vy, a’, a}) 
€ Substitutions(u, uy, a’, @}). 


Proof. Suppose hyp (25.55), let s; = Substitutions(v, v;,a',a{), and let 
s = Substitutions(u, u;,a',a)). Then scopemin (25-49) uu, .s(0)U1+ 881], 80 it 
follows that 5s; < $s, < s,. Thus (25.55). 


25.56 Thm. u isa designator & 2’ is an injective sequence of variables & 
a’ and a} are sequences of terms & Lnz' = Lna’ = Lna, & (visa formula 
— a’ is simultaneously substitutable for z' in u & a} is simultaneously 
substitutable for z’ in u) — substitute(u,/a’],uz[aj,@’,a,). 


Proof. Suppose Juda'=(25.56). By BLNP there exist minimal such u 
and 2’. Let v = u,/a’|, let vy, = u./[a4|, and let 


s = Substitutions(v, v1, a’, a4). 


Clearly >(u is a variable), so v(1) = v)(1) = u(1). Suppose ~((u(1)) = 3 & 
(u(2)) € Ranz'). Suppose 1 <7 < Index (u(])), let w = ((Argu)(2))2[a'], 
and let w, = ({Argu)(r)),{a,]. By the minimality assumption we have 
substitute(w,w,,@',a,). But w occurs in v and wy occurs in 1, so by 
(25.55), (w,w:) € s. Thus (v,v;) € s, a contradiction, and thus (u(1)) = 
3 & (u(2)) © Rang’. There exists j such that'l <j < Lnz’ & 
z'(7) = (u(2)). Let y! = a'f1,7 - 1) * 2'[y + 1,Lnz'}; by (19.38) we have 
y' < 2’. Suppose 1 < ¢ < Index (u(1)), let w = ((Argz)(2))y:[a’], and let 
uw; = ((Argu){2)}y:[a,]. Again we have substitute(w, wi,a’,a,), w occurs 
in v and w; occurs in v1, so (w, wi) € s. Thus (v,v,) € s, a contradiction, 
and thus (25.56). 
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25.57 Thm. (equality theorem) hyp (25.56) > 
Ds 57(u,z',a', a4): OF Impl{Equals(a’, a4) * (uz [a'|~u,-/a)])). 

(See Corollaries 1 and 2 of [Sh,§3.4]. The proof given there seems to 
require a slight emendation, as given below, because the variables occurring 


in one of the terms may overlap with the variables being substituted.) 
Proof. Define 


y' = Enum {y € Occ Conj Equals(a’, a}) : y is a variable}, 
z' = Enum {z € Rany': z¢ Ranz'}, 
d= {G, Foutateal 43) rg € Dom y}, 
d' ={(j,d):7 €Domy' & Vify'(j) = 2) ~ d=2r()) & 
(y'(9) ¢ Ranz’ > d= e'(j))}, 
c= {(,a'(Dy[e]) :1€ Doma’}, 
e = {Ua My [e}) : le Doma}}, 
v= Uz [d'}. 
We distinguish two cases: 1. u is a term, and 2. u is a formula. Define 
C= Dy 51 (V2! i¢'], C2 fei, e',c4), 
Cy = Dig 54(0a! fel, valei],e, ci), 
C' = Ci, in case (u), for 1 < wp < 2, 
Dy = C45 25(Equals(e’,c)),C", 0), 
Ao = Conj Equals(a’, a))u,|a'|~ur [ar], 
A, = Imp! (Equals(a', a}) * (up [a'|~uz[ai])), 
Dy = Dys gales y's Avs D4). 
Unfortunately, there is a trivial distinction of cases to make: 3. a’ = a = 0, 
and 4. =(3). Define 
Di = (u~t), 
Di, = Di» (Ao=Ay) * (Ai), 
D! = Dy, in case (yu), for 3 <p <4. 
Suppose hyp (25.57). Clearly (3) > con (25.57), so suppose (4). By (25.56), 
(25.51), and (25.54), C’: Equals(e’,c\) F ug ce’ ]~uy[e)|. Let 


C = Conj Equals(e’, ¢)) (ue! e]~us |e} ])- 
By the corollary (25.25) to the deduction theorem, Dj: 0 FC. But 


Aoy[e'| = C, so by the theorem on constants (25.28), Dj: 0 F Ap. Then 
by (25.22), Dy: OF Aj, but D' = D{. Thus con (25.57), and thus (25.57). 
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25.58 Thm. (corollary to the equality theorem) a is substitutable for z in A 
& —(z occurs in a) > Dig sg(a,c,A): OF A,[a] Sa2z(z=a& A). 


Proof. Define 


D! = Diy A, (a), (2), (a)) * (22a>(APA,[a])) + (20k AZ A,[a) + 
(dx(2% ak A) A,[a z/@ ef + (a%a&A,[a]“42(z~a&.A)) * Dh, g(a) * (aa) + 
(A,[a]edz(z2a&A)). 0 


Finally, we discuss the prenex operations; see [Sh,§3.5]. 


25.59 ‘ee zisa variable & Band C are formulas & ~(z is free in C) 
~ @) +++ & (6)), where 
: ae 25.50(Z, B): 0 F “32BSVe7B, 
« Dhos so{z,B): OF SVeB3r5B, 
. Dhos. ale B,C): OF 4rBVCe432(BVC 
« Dios s(t, B,C): OF YeBVCBY2(BVC 
. Dhosso(t, B,C): OF CVIrBO32(CUB 
. Dhos5(t, B,C): OF CWrBS¥2(CVB). 
Proof. Define 
Di = (BSS"B) * Ch 99(B, =SB, 2) * (EzBJ255B)+ (52 B Ove B), 
os (Vr B27 B), 
= (B™BUC) * Ch, 44(B, BUC, 2) * (Ar BS 32(BUC)) « 

(piCa3e( B00) (C8 3e(BYC)) + (Bos5zB) « (BYCS3ArBVC) * 
(4r(BYC)S32BVC) + (G2BVCSi2(BVC)), 7 

Dy = (BBYC) + Dis .4(B, BVC, 2) « (¥zB=¥2( BYC)) « (CS BUC) « 
Dag 3(C, BUYC,z) * (o=¥e(BVC)) * Dys n(BVC, x) * « (Va(BVC )SBYC) « 
(V2(BYC)&%C™ B) + Dh, .(V2(BVC)& =C,B,x)* (V2(BYC)&SCS9rB) + 
(Y2(BYC)SVcBVC) * (V2BVCSY2(BYC)), 

Di = (CUBS BUC) + Chy so(CVB, BUC, 2) + G2(CVB)32(BVC)) + 
Di + (ArBVCes42(BYC)) « (CVirB32(CVB)), 

Di = (CUBR BUC) * Ds 99(CVB, BUC, 2) » (Va(CVB)¥2(BUC)) + 
Di * + (Ve BUC Y¥2( BUCY) (CWrBesvz(CVB)). 
25.60 Def. A; is an immediate prenex transform of A @ JrdyIBSCiADiDd, 


(x and y are variables & A, Ay, B,C, D, and D, are formulas & x occurs 
in A & yoccursin Ay & Boccursin A & CoccursinA & -(y is 


’ 


: 


own fk wre 


) 
), 
) 
) 
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free in °) & ‘ is substitutable for z in B & replace;(A,Ai,D,D,) & 
((1) V «++ Vv (6))), where 

1. D=%12B & Di = Yr B, 

2. ae = “VB & Di = dB, 

3. D= SrBVC & Dy = dy(B ey 

4, D=%rBVC & Dy = Yu(B, fy|VC), 

5. D=CV32B & D, = Sy(CVB-[y]), 

6. D= CVWzB & D,; = Vy(CVB,/y]). 
25.61 Thm, A, is an immediate prenex transform of A — 
Dhbgo1(A1, A): OF APSA. 

Proof. Define xz, y, B, C, D, and D, as in (25.60). We distinguish the 
six cases (1)-(6) of (25.60). Define 

dD = D5. 34(A, Ais (D}, (D1)), 

D,= Di 25.59(2; B)* Dj, 

dD, = Paaaal™ B)+ Dp, 

C= Pas aol Di, on 


Di = C's Das, “ (y, B,/y],C) * Do. 
D= * Dy 25.50(¥: Bz |y],€) * Do, 
Di= CPDL, cok y, Bz/y),C) * Dj, 
ae = Cl * Deassol(y, Be[y|,C) * Do, 


= Dy, in case (x), for 1 <p <6. 


It is possible to express within our theory the notion of a formula being 
in prenex form. One can construct the prenex form of a formula via a 
bounded function symbol. Each of the transforms (1)-(6) pushes a logical 
connective to the right of a quantifier. It is necessary to define the notion 
of occurrence of a logical connective in such a way that the occurrences 
of negation in a universal ee are not counted, and to impose the 
restriction in (1) that (B(1)) 4 =. Then we obtain the prenex form A; of A 
by a sequence a of a each being an immediate prenex transform of 
its predecessor, with Ln A’ < (Ln A)? + 1. The formulas may grow slightly 
in length because a universal quantifier has length 4 while an existential 
quantifier has length 2, but we obtain the bounds 


Ln A’ < Log(2-(A# A)), 
Ln Sup A’ < Log(A- (2-(A#a))’), 
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and 
Sup Sup A’ < Max(Sup A, Sup A:). 


Finally, one can construct a bounded function symbol that is a proof from 0 
of the equivalence of a formula with its prenex form. J do not think that it 
will be necessary for our purposes to carry out these constructions. 


Chapter 26 


Special constants 


There is another important derived rule of inference. When we have 
proved 4xA it is very useful to have a name for such an x. In our proofs we 
have been saying “there exists x such that A”. More formally, for a closed 
instantiation dxA one can adjoin a new constant r, called a special constant, 
and the special aziom JxA — A,([r], and this device can be iterated. When 
axA is not closed, it is necessary to treat its free variables as constants; 
this is a tacit use of the Theorem on Constants. In this chapter we will 
construct a predicative arithmetization of the method of special constants, 
following the presentation contained within (Sh,§4.2]. 


26.1 Def. B is a special axiom + dr4jAJr(z isa variable & A is a formula 
& risaconstant & z occurs in A & -(r occursin A) & JzAisa 
closed formula & B= 4rA™A,[y)). 


26.2 Def. Spvar B = x 4A3r scopes, (26.1), otherwise z = 1. 
26.3 Def. Spform B = A @ Ixdr scopes, (26.1), otherwise A = 1. 
26.4 Def. Spconst B = r 4 3x4 A scopes, (26.1), otherwise r = 1. 


26.5 Thm. A and B are formulas & x and y are variables & —(y occurs 
in AVB) > Dig5(A, B,z,y): (Gr ASA,fy|)SB) FB. 


Proof. Define 


D' = ((3rA5A,[y])S 


B) * )=B) * Dy 55(A,z,y) * 
(AzASSyA, [y}) * Dg o5.so(y, Aclyl, 


| y(i2aA yl) 
“de y (sz AA, [y])) * (B). 


Aye 
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26.6 Def. t|B'] = (Langt U Nils B*, Axt U Ran B’). 
26.7 Thm. t isa theory & B' is a sequence of formulas — t/B'] is a theory. 
Proof. From (26.6) and (24.14). 


26.8 Thm. (theorem on special constants) t is a theory & B’ is a sequence 
of special axioms & Vu(u is a nonlogical symbol & wu occurs in B’* & 
u ¢ Langt > re <i<InB & u= Speonst-B'(3)}) & Will <i < Ln B' 
— Spconst B'(i) ¢ Lang #UOcc B'[i+1,Ln B']*) & Aisa formula of Langt 
& Dj is a proof in t[B'| of A + Dj,,(t, B’, A, Dj) is a proof in t of A. 


Proof. Define 


r' = {(1, Spconst B'(1)) : 1 € Dom B'S, 
a = {(7, Spform B'(2)) : 1 € Dom B'}, 
Ag = {(¢, Impl(B"{i, Ln BY * (A))) : ¢€ Dom B’U {Ln B’ + 13}, 
ae Ds 25(B', Dj, Enum Ax ¢), 
= {G, Xpryasi) 27 € Dom Bf, 
Ct = = {(t, Ssub(C§(z),7',y')) :¢ € Dom B’}, 
Al = = {i »Ssub(Ao(? ),r',y')) : 1 € Dom Aj}, 
Dy = Ds 29 (t's ys Aj 1(1), D4), ; ; 
Di = Diga(Ci(a), Ay (i + 1), Spvar B'(),¥'(), 
D! = Dix {(i, Di) :1 € DomB'}*. 
Suppose hyp (26.8). Observe that 
lL. wivj(1 <i <j < Ln B' > -(r'(7) occurs in B'(j})). 


Now B' is a sequence of closed formulas, so by the corollary (25.25) to 
the deduction theorem, D{ is a proof in ¢ of Impl(B’ * (A)). Observe that 
Impl(B' * (A)) = Aj(1). By the theorem on constants (25.28), D} is a 
proof in t of Aj(1). By (26. 5), which is applicable by (1), 1 <7 < LnB' 
> Dy: Aj(t) Ai(t + 1), so D’ is a proof in t of Aj(Ln B’+ 1). But 
Ai(Ln B' + 1) = A, and thus (26.8). 


Chapter 27 


Extensions by definition 


In this chapter we will predicatively arithmetize the notions of extension 
by definition of a predicate symbo! and extension by definition of a function 
symbol, and show how to construct bounded function symbols that trans- 
late proofs into the original theory. We will follow {Sh,§4.6} except for the 
proof that an extension by definition of a function symbol is conservative. 
We begin with some general properties of translation functions. 


27.1 Def. g is a translation function on s + g is a function & s isa 
set of formulas & Domg=s & VB(B €s - g(B) isa formla & 
Free g(B) = FreeB) & (1) & (2) & (3), where 

1. VB(=B € s - g(*B) = ~g(B)), 

2. VBVC(BVC €s > wee) = g(B)¥g(C)), 

3. VBVz(32B € s — g(3rB) = izg(B)). 
27.2 Def. Atoms A = {B € Formulas A : B is an atomic formula}. 


27.3 Thm. g, and gs are translation functions on FormulasA & 
9i| Atoms A = 92|AtomsA —> 91 = 92- 

Proof. Suppose Ayp (27.3), and suppose 3B(g:(B) # g2(B)). By BLNP 
there is a minimal such B. Clearly B € Formulas A. By (23.30), B is an 
atomic formula, which is impossible. Thus g; = go, and thus (27.3). 


27.4 Thm. go is a translation function on Atoms A — g(g is a translation 
function on FormulasA & go Cg & LnSupg < LnA-Sup(Ln ogg) < 
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Log{A # go(Maxm(Ln © go))) & Sup Supg < Max(Sup A, Sup Sup gp)). 
Proof. We use the abbreviation a for 


g is a translation function ons & s € FormulasA & g Cg & 
VB(B € s — Formulas B C s). 


Suppose hyp (27.4). We claim that 

l. a & Bés > Ing(B) < LnB-Sup(Ln ogo) & Supg(B) < 
Max(Sup B, Sup Sup go). 
Suppose JB-(1). By BLNP there exists a minimal such B, but this is 
impossible by (23.30). Thus (1). Since 

Ln B- Sup (Ln o go) < Log(A # go(Maxm(Ln © go))), 
we have 

dga@: Domg < Formulas A, LnSupg < Log{A #go(Maxm(Ln © gp))), 
Sup Sup g < Max(Sup A, Sup Sup go). 
We have ag Atoms A, gq] and hence 3g a,(Atoms A]. Let 

$ = Max s(s < Formulas A & Ig a). 
Then 4g a by MAX, so of course there exists g such that a. Suppose 

2. JB(B € Formulas A & B ¢ s). 
By BLNP there exists a minimal such B. Let s, = sU{B}. Now B ¢ 
Atoms A, so by (23.30) there exist C, D, and x such that 

Cés& DEs&(B=7CVB=CVBVB=4sC). 
Suppose B = 7*C and let g. = gU{{aC,7g(C))}. Then az,[sigi], so 
Aga,|si}. By the maximality of s we have s; < s, a contradiction. Thus 


B#7C. Suppose B = CVD and let g=gU {(CVD,g(C)¥g(D))}. Then 
$) < $, a contradiction, and thus B = 32C. Let gy = g U {(arC, drg(C))}. 


Then s; < s, a contradiction, and thus —(2). Therefore s = Formulas A, 
and thus (27.4). 


27.5 Def. Trext(go, A) = g ++ go is a translation function on AtomsA & 
g is a translation function on FormulasA & go © g, otherwise g = tl. 


We have been using the abbreviation go f. Now we introduce a binary 
function symbol denoted by o. 
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27.6 Def. gof ={{z,z):2€Domf & f(z)eDomg & z= 4(f(z))}-. 


27.7 Thm. g is a translation function on s & B' is a sequence of formulas 
& Impl B' € s — g(Impl B’) = Impl(g o B’). 


Proof. Suppose 1B'=(27.7). By BLNP there exists a minimal such B'. 
Clearly Ln B’ > 2. Let By = B'/2,Ln B’). Then Imp! B’ = B'(1)Impl Bi, 
so con (27.7), a contradiction, and thus (27.7). 

27.8 Thm. g is a translation function ons & Impl(B’*(B))cs & Bis 
a tautological consequence of B’ — 9(B) is a tautological consequence of 
g° B'. 

(See the Remark in [Sh,§3.1].) Proof. Suppose hyp (27.8) and let A = 
Impl(B’ « (B)). By (27.7), g{A) = Impl(g 0 B' « (g(B))). Suppose v is a 
truth valuation on g(A), and let 


vo = {(C, v(g(C))) : C € Formulas A}. 


Then vo is a truth valuation on A, so vo{A} = 1 and hence v(A) = 1. Thus 
g(A) is a tautology, and thus (27.8). 


27.9 Thm. g is a translation function ons & Ces & DéEs & Ccan 
be inferred from D by 5-introduction — g(C) can be inferred from g(D) 
by =-introduction. 


Proof. Suppose hyp (27.9). There exist x, A, and B such that —(z is free 
in B) & D=A™B & C = 42ASB. Since Free g(B) = Free B, we have 
-(z is free in g(B)). Also, g(D) = g(A)“%9(B) and g(C) = Jzg(A)=9(B), 
so con (27.9). Thus (27.9). 


27.10 Thm. Ais aformula & g is a translation function on Formulas A 
— replace(A,g(A}, Enum Atoms A, g o Enum Atoms A). 


Proof. Suppose hyp (27.10), and let B‘ = Enum Atoms A. Suppose 1: 
1B(Bc¢ Formulas A & (B,9(B)) ¢ Replacements(A,g(A), B',go B’)). By 
BLNP there exists a minimal such B, which is impossible. Thus (1), so 
that con (27.10). Thus (27.10). O 

Now we introduce the notion of an extension by definition of a predicate 
symbol. 

27.11 Dej. extp(t:,t,p,2',D) « t, and t are theories & p is a predicate 
symbol & p¢Langt & p#= & z' is an injective sequence of variables 
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& Indexp=Lnz' & Disa formula of Langt & RanFree DC Ranz’ 
& t; =2[(pxz!* 4 D)). 

27.12 Def. Tratp(p,z', D,u, A) = C - ((A(1)) #p 9 C=A) & 

((A(1)) = p > C = Basaa(D, A * u)z"[ Arg A]). 

This is the arithmetization of A*, for A an atomic formula, in the dis- 
cussion of predicate symbols in [Sh,§4.6]. Recall that Bos 44(D,A * u) is 
a variant of D, constructed to avoid colliding variables with A*u. It is 
convenient to allow the dependence on an auxiliary expression u; this will 
save a lot of fuss with variants. 


27.13 Def. A is an atomic formula of | © A is an atomic formula & A is 
a formula of J. 


27.14 Thm. extp(t),t,p,z',D) & A is an atomic formula of Langt, — 
Dy, 44(p,2', D, A,u) is a proof in t; of AFTratp(p, 2’, D,u, A}. 

(See (i) in the discussion of predicate symbols in |Sh,§4.6]. The restric- 
tion to atomic formulas will be removed shortly.) Proof. We distinguish 
two cases: 1. {A(1)) # p and 2. (A(1)} = p. Define 

Dy = (AA), 

Do = Bos.a4(D, A* u), 

D, = (pxa!* 25D) * Dig 43(Do, D) * (pex!* Do) 

Dts g(Arg A, 2', psx! Dp) * (px( Arg A)" Doz [Arg Al), 

D' = Di, in case (4), for 1 <p <2. 

Suppose hyp(27.14). Clearly (1) — con (27.14), so suppose (2). Then 
p+(Arg A)* = A and Do,:[Arg A] = Tratp(p, 2’, D,u, A), so by the variant 
theorem (25.43) and the substitution rule (25.5) we have con (27.14). Thus 
con (27.14), and thus (27.14). 


27.15 Def. Trfnp(p, 2’, D,u, A) = 

Trext({(B, Tratp(p, 2’, D,u, B)) : B € Atoms A}, A). 

27.16 Def. Trp(p, 2’, D,u, A) = Trfnp(p, z', D,u, A)(A). 

27.17 Thm. extp(ti,t,p,z',D) & A is a formula of Langt; > 


Trp(p,z',D,u, A) is a formula of Langt & (A is a formula of Langt > 
Trp(p, 2’, D,u, A) = A). 


Proof. Suppose JA~—(27.17). By BLNP there exists a minimal such A, 
which is impossible. Thus (27.17). 
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27.18 Thm. hyp (27.17) — Dj, 4.(p,z',D,u, A) is a proof in t; of 
A®™Trp(p, z', D,u, A). 


Proof. Define 


By = Enum Atoms A, 

Di = (i, Doz 44(p,2', D, B'(t),u)) 17 € Dom B'}* « 
Ds 94(A. Trp(p, 2’, D,u, A), B’, BY). 
Then (27.18) by (27.14) and the equivalence theorem (25.34), which is 
applicable by (27.10). 


27.19 Thm. g = Trinp(p,z',D,u,A) & zisavariable & aisaterm & 
BeéFormulasA & B,la] € Formulas A > g{B,[a]) = (g(B)./a]). 


Proof. Suppose 3B-(27.19). By BLNP there exists a minimal such B. 
Clearly ~(B is an atomic formula), (B(1)) # =, and (B(1)) # V. Therefore 
(B(1)) = a. Let y = (B(2)) and let C = B|3,Ln Bj, so that B = JyC. Sup- 
pose y = x. Then g(B;{a]) = 9(B) = (9(B).[a]), a contradiction, and thus 
y # x. Then g(B,[a]) = g(4yC,[a]) = Iy9(Cz[a]) = 3y(9(C)).[a] by the 
minimality assumption, and dy(g(C)}z[a] = (g(ayC)),/a) = (9(B)),/al]. 
This is a contradiction, and thus (27.19). 

27.20 Thm. extp(ti,t,p,2',D) & Dj is a proof in t of A > 
Dy o9(p,2', D, D}) is a proof in t of Trp(p,z', D, Di*, A). 

(See (ii) in the discussion of predicate symbols in [Sh,§4.6].) Proof. 
Suppose hyp (27.20) and define 

g = Trinp(p, 2’, D, Di,*, Disj Dh), 

Do = Bos.44(D, Dg*). 

Observe that 

VWVB(I1<t<LnD, & Beé Formulas Dy > 
9(B) = Trp(p,2', D, Dy", B)) 
by (27.3). Suppose 1 <7 < Ln Dj. We distinguish three cases: 

1. Dg(t) is a substitution axiom V Dj(1) is an identity axiom V (D4(1) 
is an equality axiom & -(p occurs in Dj(t})) V Dg(t) € Axt V Dj(t) is 
a tautological consequence of Di[1,i~- 1] V Ay(l< 7 <i & Dp(t) can be 
inferred from Dj{j) by 3-introduction), 

2. -(1) & D5(t} is an equality axiom, 
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3. -(1) & Dg(t) = pxxr'* SD. 
Suppose (1) and define Cj = (g(D(t))}. We claim that 
4. Cl: Enum Axt #90 Dhi1,1— 1] F (Di (x). 


This holds by (27.19) (for a substitution axiom), by (27.17) (for axioms 
of Langt), by (27.8) (for tautological consequence), and by (27.9) (for 3- 
introduction). Thus (1) > (4). 

Suppose (2), define y and 2’ as in 

Sy'S2' Dj (i) = Impl(Equals(y/, 2') + (pey!* Spxz'*)), 
and define Ch = Ds 57(Do,2',y', 2"). Thus (2) — (4)e:[C3] by the corollary 
(25.57) to the equality theorem. 

Suppose (3) and define Cy = D}; 43(Do,D) * (DoD). Observe that 
DoD = g(D4(t)), and thus (3) > (4)c:[C3) by the variant theorem 
(25.43). 

Define C’ = Cj, in case (#), for 1 < » < 3. Thus] <7 < Ln Dy ~ 
(4ci[C]. Define D' = {(2,C’) : 1 € Dom Di}*. Then D’ is a proof in t of 
g(A), and thus (27.20). 

In arithmetizing the notion of an extension by definition of a function 
symbol, we need to include the proofs of the existence and uniqueness 
conditions in order to have a bounded predicate symbol. So as not to have 
to worry again about variants, we first treat the case that the right hand 
side of the defining axiom is an atomic formula; the general case is easily 
reduced to this by first adjoining a new predicate symbol. 


27.21 Def. extio(ts,t, f,2'.y,1,P,Ch,Cy) < ty and t are theories & f 
is a function symbol & f ¢ Langt & 2’ + (y) * (yi) is an injective 
sequence of variables & Indexf =Lnz’ & pisa predicate symbol & 
Index p = Indexf+1 & C4 is a proof int of dyperl* xy & C; is a proof 


ard 


in t of pez!*+y&pea! ay SyZy & ty = t[yZfea!* Sper’ sy). 


Now we introduce some function symbols to be used in eliminating 
occurrences of f. 


27.22 Def. Newvaru = Minz(z < X, & z isa variable & -(z occurs 
in u)). 
27.23 Def. Lasta(f,u) =1 0 (u(t) = f & VWi(i< 7 <Lnu = (u(z)) ¥ f), 


otherwise ¢ = 0. 
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27.24 Def. Last2(f,u) = j + u and u|Last;(f,u), 7} are designators, other- 
wise 7 = 0. 


27.25 Def. Arglast(f,u) = Arg(u|Last,(f,u), Laste(f,u)]). 


27.26 Def. Elim(f,u) = u/1, Last;(f,u) — 1] * Newvar u * 
u(Laste(f,u) + 1,Lnu}. 


27.27 Def. Deg(f,u) = Card{i € Domu: (u(t)) = f}. 
27.28 Thm. f is a function symbol] & wu is a designator & f occurs in u 


& z=Newvaru & a’ = Arglast(f,u) & v = Elim(f,u) > u = v,/ fxa’*} 
& -(f occurs in a’*) & Deg(f,v) = Deg(f,u) —1. 


Proof. From (27.22)—(27.27). 


27.29 Thm. f is a function symbol & u is a designator > I!v'(Lnv’ = 
Deg(f,u)t+1 & v(l)=u & Vill <i< Lav’ 5 v'(¢4+)) = Elim(f,v'(2))) 
& Vill <1 < Lnv' - Deg(f,v'(z)) = Deg(f,u)+7¢—-1) & LnSupu' < Lnu 
& SupSupv' < Xustnu)- 

Proof. The uniqueness holds by (12.17). We use a as an abbreviation 
for scopes: (27.29) but with Lnv' = Deg(f,u) + 1 replaced by Lnv’ < 
Deg(f,u) +1. Suppose hyp (27.29) and let v' = Max v'a. We have ayi(u), 
so by MAX we have a. Suppose f occurs in v'(Lnv’'), and let 


vy = vU {(Lnv' + 1, Elim(f, v'(Lnv')))}. 


Then ayivg] by (27.28), so that vj < v', which is an impossibility. Thus 7(f 
occurs in v'(Lnv')); that is, Deg(f,v'(Lnv')) = 0. Consequently, Ln’ = 
Deg(f,u) + 1, and thus (27.29). 


27.30 Def. Elimseq(f,u) = v' © hyp (27.29) & scopes, (27.29), otherwise 
v=. 


27.31 Thm. f is afunction symbol & A is an atomic formula > lg(g is 
a function & Domg = RanElimseq(f,A) & VB(B € Domg — (1) & 
- & (4))), where 
1. Lng(B) < Ln B + (8+ Index f) - Deg(f, B) & 
Ln g(b) < Log(B®: (B#B)), 
2. Sup g(B) < Xana tp + 4, 
3. Deg(f, B) = 0 > g(B) = B, 
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4, VeVCVa'(Deg(f,B) #0 & z2=NewvarB & C= Elim(f,B) & 
a' = Arglast(f, B) > g(B) = jz(p+a'* +z&g(C))). 

Proof. Suppose hyp (27.31). Let A = Reverse Elimseq(f, A). Write a as 
an abbreviation for scopes, (27.31) but with Domg = Ran Elimseq(f, A) 
replaced by 37(1 < 7 < Ln A’ & Domg = RanA'1,J]}, and let g = 
Max ga. We have 

a: Domg < Ran Elimseq(f, A), Ln Supg < Log(A® - (A #A)), 
Sup Supg < Xastnat pts 
and we have a,(0], so a holds by MAX. 

Suppose 


ai(l<i<LnA’ & A'(t) ¢ Domg). 


By BLNP there exists a minimal such 7. Suppose 1 = 1. Then Deg(f, A'(1)) 
= 0. Let 9) = g U{(A'(1), A'(1))}. Then a,|gi}, so gy < g, a contradiction, 
and thus 7 #1. Let z = Newvar A'(t), let a! = Arglast(f.A'(?}). and let 


gi = 9 {(A'(i), de(peal* 4#z&g(A'(i ~ 1))))}. 
By (23.60) and (23.59), Ln g(A'(2)) < Lng(A’(2 — 1)) + (8 + Index f). Let 
k = Ln A'(2) + (8 + Index f) - Deg(f, A'(z)). 


so that Ln g,(A'(z)) < k. Since f occurs in A’ i 1) we have ea < ay (2), 
and Deg(f,A’(?)) < Ln A’{?), so that k < Log(A'{z)® - (A'( "(2))). 
Therefore ines so g} < g, a contradiction, and thus Domg = ue AS 
Ran Elimseq(f, A). Hence scope3,, (27.31). 

Suppose scopes, (27.31),{9,|, and suppose 


3i(1 <i < Ln’ & g(A'(i)) ¥ m1 (4'(0))). 


By BLNP there exists a minimal such 1. Suppose 1 = 1. Then g(A'{t)) = 
g:(A'(t)), a contradiction, and thus 7 # 1. Then again g(A'(t)) = g:(A'(2)), 
a contradiction, and thus g = g;. Thus con (27.31), and thus (27.31). 0 

In an effort to make the rest of this chapter less unreadable, let us make 
the following conventions. Any theorem marked * is understood to have 
the hypothesis 


extfo(ts,t, f,2',¥,¥1.P,Co,C}), 
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called the tacit hypothesis, and any nonlogical symbol] introduced by a defin- 
ing axiom marked *, or introduced (by “define ...”) in the proof of a the- 
orem marked *, is understood to have as its first arguments ty, t, f, 2’, y, 
tu, p, Co, Cy. In proving theorems marked *, we will not introduce and 
discharge the tacit hypothesis, and if (€) is such a theorem, by hyp(€) we 
mean the hypothesis of the theorem as written (not the tacit hypothesis). 


27.32* Def. Tratf A = g <> hyp(27.31) & scopes), (27.31), otherwise g = 1. 
27.33* Def. Trat A = Tratf A(A). 


This is the arithmetization of A*, for A an atomic formula, in the dis- 
cussion of function symbols in [Sh,§4.6]. See (i) of that discussion for the 
following result. The restriction to atomic formulas will be removed skortly. 


27.34* Thm. A is an atomic formula of Langt; ~ D},,(A) is a proof in 
ty) of ASTrat A. 


Proof. Suppose hyp (27.34) and define B' = Elimseq(f, A), g = Tratf A. 
Suppose 1 <7 < Ln B’ and define z = Newvar B'(1), a’ = Arglast(f, B'(*}), 


Cy = (Bit + 1) Fi g(B'(i + 1))) + (y= fea! rpea!* xy). 


We want to construct a proof from C; of B'(7)9(B'(i)). Recall that 
g(B'(t)) = sz(pxa'* +z&9(B'(i + 1))). Define 


Cy = Cz* Dis ola’ * (z),2' * (y) y= fea!* Sper! ey). 
By the substitution rule (25.6}, Cz: C} F 2 fsal*psxa'*«z. Define 
Ci = Cy+ Dy o5(32(2% foal!” &B'(i+1)), (Bi), (22 fea"*)s(BY(i+1)), 
(pxa’™ xz) » (g(B'(i + 1)))). 
By the equivalence theorem (25.34), 
Cl. OFF Sez fea* EB t+ 1) 9(B"())). 
Define 
Cy = Cy * Dog sa(f4a!*, 2, B’(i + 1)) * (BG + 1).[ fea!” So(BY(t + 1))). 


By the corollary to the equality theorem (25.58), Cf: Cre Cy(Ln C}), but 
BY(i+1),[fea!*} = BY). Thus 1 <i <LnB! > Ch: CLF BY(i)#9(B'(i)). 
Define 


D’ = Reverse{(z, Cf) : 7 € Dom B'[1, Ln B’ - 1]}. 
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Then D': (y= faz!*Spez'* xy) F At%g(A), and thus (27.34). 
27.35* Def. Trin A = Trext({(B, Trat B) : B © Atoms A}, A). 
27.36* Def. Tr A = Trfn A(A). 


27.37* Thm. A is a formula of Langt; — Tr A is a formula of Langt & 
(A is a formula of Langt — Tr A = A). 


Proof. Suppose 3A-(27.37). By BLNP there exists a minimal such A. 
Then A is an atomic formula, so that Tr A = Trat A. But by (27.31) this 
is impossible. Thus (27.37). 


27.38* Thm. A is a formula of Langt; — D}733(A) is a proof in t, of 
ASTr A. 


Proof. Define 


B' = Enum Atoms A, 

Bi = {G, Trat B'(t)) :¢ € Dom B’}, 

D! = {{i, Dy s4(B'(t))) 21 € Dom B'}* * Dy 54(A, Tr A, B’, By). 
Then (27.38) by (27.34) and the equivalence theorem (25.34), which is 
applicable by (27.10). O 

The next task is to give a predicative arithmetization of the theorem 
that an extension by definition of a function symbol is conservative. It is a 
semantic triviality that such an extension does not alter the validity of any 
formula, but the argument by Gédel’s Completeness Theorem that it is a 
conservative extension yields no clue as to how much longer is a proof with 
the new function symbol eliminated. We cannot follow the proof of (ii) in 
the discussion of function symbols in [Sh,§4.6] because it is based on the 
Theorem on Functional Extensions (in which the uniqueness condition is 
not assumed), whose proof in [Sh,§4.5] uses Herbrand’s Theorem, which in 
turn depends on the Consistency Theorem; this argument yields a super- 
exponential bound. (I do not know whether the Theorem on Functional 
Extensions can be established predicatively; we have not used such exten- 
sions in the development of our theory.) The difficulty in a direct proof, 
similar to the one for an extension by definition of a predicate symbol, is 
that the translation of a substitution axiom is not in general a substitution 
axiom—the analogue of (27.19) fails because the term a may contain the 
new function symbol f. There is a direct proof in [K1,§74], but it is very 
intricate. Here is a different proof; so far as I know, it is new. 
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The idea can be described very quickly. Consider an extension T, of T 
by definition of a function symbol f. For any variable-free term a of T; we 
define a variable-free term a‘ of T, (this is the theory obtained by adjoining 
all special constants and special axioms of T; see [Sh,§4.2]) by replacing 
each part of a of the form fa,...a, by the corresponding special constant, 
working from right to left. By the existence and uniqueness conditions and 
the special axioms, A,|a'* and A*{a‘] are equivalent in T,. Therefore if 
C is a closed substitution axiom of T,, then C* is equivalent in T, to a 
substitution axiom, and since T, is a conservative extension of T, C* is a 
theorem of T. If C is an arbitrary substitution axiom of T,, then Fy; C* by 
the Theorem on Constants. 

Now let us examine the argument in full detail. Let T be a theory, Jet 
p be a (v + 1)-ary predicate symbol such that 


hp dy pri... try 
(existence condition) and 
hy pry...2yy & pry... ty ey = YH 


(uniqueness condition), and let T; be the theory obtained by adjoining to T 
a new v-ary function symbol f and the defining axiom 


yofay...0, + pz... 2 y. 


Let A be an atomic formula of T,.; we define A* by induction on the 
number of occurrences of f in A. If there are none, then A* is A. Otherwise, 
let B be the atomic formula with one less occurrence of f obtained by 
replacing the rightmost occurrence in A of a term beginning with f by z, 
where z is the first variable in alphabetical order not occurring in A. so 
that A is B,[fa;...a,} where aj,...,a, do not contain f. Then A* is 


Fz(pa;...a,2z & B*). 


For a non-atomic formula A of T;,, we define A* by replacing each atomic 
part C of A by Ct. This is the construction of [Sh,§4.6], which has been 
arithmetized in (27.31). 

Let us show that if a is a term of T,, with no occurrences of f, then 


i. Axla]* is A* ia]. 
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It suffices to prove (i) for A atomic. Then the proof is by induction on 
the number of occurrences of f in A. If there are none, then both formulas 
are A,{a]. Otherwise, using the notation introduced above, we see that the 
following are al! the same formula: 


A,[a}*, 
B, (fa; ...a,],/a]*, 


B,{ale[farx [a]... avx{al]*, 


3z(parxla}..-arx{a}z & By[a]*), 
F2(parx[a]...ar.{alz & Br lal), 
Aj lal. 


The induction hypothesis was used in the next to last step. 

Let a be a variable-free term of T;.. We define a variable-free term a‘ of 
T, by induction on the number of occurrences of fin a. If there are none, 
then a‘ is a. Otherwise, let b be the term with one less occurrence of f 
obtained by replacing the rightmost occurrence in a of a term beginning 
with f by y, so that a is b, [fax ... a, where ay... a, do not contain f. Let r 
be the special constant for Jypa;...a,y; then a‘ is b,/r!*. 

Now let us show that if ais a variable-free term of T,.. then 


ii, Fr, Axlal*  A¥(a‘}. 


By the Equivalence Theorem, it suffices to prove (ii) for A atomic. We 
can assume that there is precisely one free occurrence of x in A-~if there 
are none, we have (ii) by a tautology, and otherwise we can write A,/a] 
in the form A}, ,,a...a] and obtain (ii) by induction on 4 from the case 
A = 1. Now the proof is by induction on the number of occurrences of f in 
A,/a]. If there are none, then we have (ii) by a tautology. Otherwise, use the 
notation introduced above. If the rightmost occurrence of a term beginning 
with { is not in the occurrence of a that has been substituted for x, then 
A,(a] is B,[a],[fai...a,], so that A,{a]* is 3z(pa,...a,z & B,[a]*}, which 
by the induction hypothesis is equivalent in T, to 4z(pa;...a,z & B*[a‘}); 
j.e., to A*fa‘]. Otherwise A,(a] is Ax[by|fa;...a,]], so 
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A,laj* is Ja(pay...a,z & A,[b‘*) 
where b! is b,[z}. Now 
Fre dypar...avy 
by the existence condition and the Substitution Rule, so 
iii, Fo, pay... ar 
by the special axiom for r. Also, 
roe pay..-apr & pay...ap2 9 T=2 
by the uniqueness condition and the Substitution Rule, so 
by, Pay..-ap2Z T= 2 
and a fortiori 
ba, pay. ..ap2 & A,|b']* +3 =z. 
But 
bre t= 2-9 (Agfb YEE] > Axlb']") 
by the Equality Theorem, so 
bp, pay...aypz & A,ib'|* 5 Ay |b |r] 
by a tautology. By 5-introduction, 
iv. Fy, da(pay...arz & Axfb']F [r]) > Ax(b'|} [r}. 
Conversely, since 
Fp, pay..-apr & A,{b'] |r] + S2(pay...ayz & A,|b']*) 
by a Substitution Axiom, we have by (iii) that 


v. Fa, Ay{b"*[r] > 32(pay...az & Ax{b'}*). 
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By (iv) and (v), A,[a]* is equivalent in T, to A,(b']*{r], which by (i) is 
A,(bi[r]]*, ie. A,[by[r]]*. By the induction hypothesis, this is equivalent in 
T, to A*[b,|r]°J; i-e., to Ax/a°). This proves (ii). 

Now we are ready to prove that if tr, A then /y A*. The proof is 
by induction on theorems (see |Sh,§3.1]). Tautological consequence and 
5-introduction present no problem, by the way in which we defined A* for 
A non-atomic (to borrow from our arithmetical] terminology, the mapping 
A+ A* is a translation function), so we need only show that if A is an 
axiom of T; then A* is a theorem of T. Let To be the theory obtained 
by adjoining new constants e;,€2,e3,... (distinct from f), but no new non- 
logical axioms, to T. Let A° be Ay, w,/€1---€,] where wi,...,w, are in 
alphabetical order the free variables of A. Notice that A°* is A* by (i), 
so by the Theorem on Constants it suffices to show that t, A°* for A an 
axiom of T). 

Let A be an axiom of T. Then A°* is an instance of A. 

Let A be a substitution axiom of T,. Then A° is a closed substitution 
axiom B,/a! + AxB, and by (ii), B,[a]* is equivalent in To, to By/a‘], so 
that A* is equivalent in To, to the substitution axiom B*[a‘] > 3xB*. But 
A°* is a formula of Tp and Ty is a conservative extension of Ty, so A°* is 
a theorem of To. 

Let A be an equality axiom for f. Then A° is 


a} =b, ~--: 3a, =b, — fa,...a, = fb)... b, 


where a).....b, are €;,....€g, in some order. Let r be the special constant 


for Sypa;...a,y and let s be the special constant for dypb, ...b,y. By (ii), 
A°* is equivalent in Ta, to 


a=boe: sa =bore=s. 


But 

Haye A = by +++ + a, = b,  (pay...a,s © pb,...b,s) 
by the Equality Theorem, and 

bp, Poi... bys 


by the special axiom for s and the existence condition, so A°* is a theorem 
of To. and hence of To. 
Finally, let A be the defining axiom of f. Then A° is 
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b = fa)...a, © pa,...a,b 
where b,aj,...,a, are €),...,€,4) in some order. Again let r be the special 
constant for Jypa; ...a,y. By (ii), A°* is equivalent in To, to 
b=r-« pa,...a,b, 
so that A°* is a theorem of Ta,, and hence of To, by the existence and 
uniqueness conditions and the special axiom for r. 
Since A* is A if A is a formula of T, this shows that T, is a conservative 
extension of T. 
Now it is a straightforward task to give a predicative arithmetization of 
this argument. 


27.39% Thm. Dj is a proof in t) of A > Dbz 99(Dp) is a proof in t of Tr A. 


The proof and the construction of D5; are omitted. More precisely, | 
have omitted to write them down. In a previous version of this chapter I 
carried out a detailed arithmetization. But as Sam Buss pointed out, there 
was a conceptual error in the original metamathematical argument, and 
this was simply copied in the arithmetization. The moral is the familiar 
one that one’s capacity for self-deception is great. Perhaps this can be 
avoided by submitting oneself to the discipline of a completely formalized 
proof, but this is an ideal that is seldom achieved in mathematics, and 
certainly not in the present work. 

Now we remove the restriction that the right hand side of the defining 
axiom be an atomic formula. 

27.40 Def. extf(t1.t,f,2',y,y1,D,Ch,C\) <— t; and t are theories & f 

is a function symbol & f ¢ Langt & 2! x (y) * (y) is an injective 

sequence of variables & Indexf = Lnz’ & D is a formula of Langt 

& RanFreeD < Ran(z' * (y)) & Cis a proof in t of SyD & 4, is 

substitutable for y in D & C{ is a proof in t of D&D, iy.) yy: & 

ty = tiy= far" SDI. 

27.41 Def. Tri(ti,t, f,2',y,y1,D,Cg,Cy,u, A) = 

Trp(Punztsis 2! * (y), Du, Tr (t1,t, £2", 9, Yr, Pun ets1ts Co, Cy, A). 

27.42 Thm. extf(ti,t, f,2',y,y1,D,C,C,) & Dj is a proof int of A> 

Dbz 4p (t,t, f,2',y, 41, D, Ch, Cy, Dg) is a proof in ¢ of 

Try (t1.t, f.2'. 9,91. D, Ch, Cy, tora (tit, f,2',.4, 41, D, Co, Cy, Dp), A). 
Proof. Suppose hyp (27.42) and define 
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p= Phizisiye ’ 
tg = t[(pez!* ayes D)], 
tg = tel(y= fer psc sy), 
Ch = Ch * Che 9 (pez! xy, D,y) + (Sypaz'* +y), 
Ch = Ch + Dic ol(us)s{y), pez!" 4yesD) + (pea! ay 23Dy Lyi) + 
(per!* xy pee! 4y) Sy=y). 
Then extfo(ts,¢2,f.2',y,y1, Pp, C3,C4). Define 
dD, = Dbz 39 (ts: to, f, 2'6U, Yas Ds C), Cy, Do). 
u=D,", 
D! = Dy 4(p, 2, D, D1). 
Then con (27.42), and thus (27.42). 
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Chapter 28 


Interpretations 


The proof in [Sh,§4.7] of the Interpretation Theorem has a straightfor- 
ward predicative arithmetization. We begin with the notion of an interpre- 
tation ¢, with universe uo, of one language in another. 


28.1 Def. interpo(t, uo, t1, 2) - 1; and ly are languages & up is a predicate 
symbol & Indexup = 1 & uw El & Domi=l, & RaniCl, & 
Ve(v © > Indexi(v) = Indexv & (i(v) is a predicate symbol © v is a 
predicate symbol)). 


28.2 Def. ug) = {(j,0):7 € Domu & (u(7) € Domi > v = i(u(y))) & 
(u(7) ¢ Domi -+ v = u(z))}. 

This construction is used to interpret a term or an atomic formula u: 
replace each nonlogical symbol by 7 of it. We construct the interpretation 
A®“) of a general formula A in two steps. 


28.3 Thm. Aig(g is a function & Domg = FormulasA & VBVCV2(B Ee 
Domg & CeéDomg & zisa variable — (1) & --- & (5))), where 

1. Lng(B) < 8-LnB < Log B® & Supg(B) < Max(Sup B,Supz) + 
Z+V ++ Uo, 

2. Be Atoms A — g(B) = Buy, 

3. =B ee Domg = g(=B) = ~9(B), 

4. BVC € Domg — g(BYC) = 9(B)Vg(C), 

5. dzB € Domg — g(srB) = Ar(up*ré&g(B)). 


Proof. Write a as an abbreviation for scopes), (28.3) but with Domg = 
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Formulas A replaced by Domg C FormulasA & VB(B € Domg > 
Formulas B C Domg), and let g = Maxga. We have a,|0], so a holds 
by MAX. Suppose 


3Bo(Bo € Formulas A & By ¢ Domg). 


By BLNP there exists a minimal such Bo. Clearly By ¢ Atoms A, so there 
exist B, C, and z such that B and C are formulas & 1 is a variable 
& (Bb = 7BV By = BYVC Vv By = 3zB), but this is impossible. Thus 
Dom g = Formulas A and so scope3), (28.3). 

Suppose scope>),(28.3),\91|, and suppose 


4Bo(Bo € Formulas A & g(Bo) # 91(Bo)). 


By BLNP there exists a minimal such Bo, which is impossible. Thus g = g,, 
and thus (28.3). 


28.4 Def. Atiu,j) = (Min g scopesi)(28.3))(A). 
28.5 Def. Univ(uo, 2') = {(, uoxz'(7)) 2 7 € Domz'}. 
28.6 Def. Af) = Imp](Univ(uo, Free A) * (Agiu,)))- 


Now we can define an interpretation of one theory in another. Again, 
proofs are included as part of the structure in order to obtain a bounded 
predicate symbol. 


28.7 Def. interp(t,ug,C’,2£",Cyj,Cy,t1,t2) © t; and tg are theories & 
interpg(?, uo, Langt,,Langt,) & C' is a proof in t, of 5X o(uo* Xo) 
Domz" = DomCj = {f € Langt; : f is a function symbol} & DomC] = 
Axt, & (1) & (2), where 

1. Vf(f € Doma" - z"(f) is an injective sequence of variables & 
Lna"(f) = Index f & c§(f) is a proof in tz of 
Impl(Univ(wo,2"(f)) * (uori(f)=2"(f)"))), 

2. VA(A € Axt, > C"(A) is a proof in ty of A@™)), 


Given an interpretation of one theory in another, we want a bounded 
function symbol that converts a proof of a theorem in the one theory into 
a proof of its interpretation in the other theory. We need two preliminary 
results. 
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28.8 Thm. interp(2,uo,C',x2",Cj,Ci,ti,t2) & ais aterm of Langt,; > 
Dyg.g(t, Uo, £". CG, a) is a proof in t2 of Impl(Univ(uo, Free a) * (up*aqy)). 

Proof. Suppose hyp (28.8) and define 

ro = {(b, Ln 6b) : b € Terms a}, 

a = Enumer(Terms a, rq), 

B' = {(j, Impl(Univ(uo, Free a'(j)) * (up*a'(j7)(@))) : 7 € Doma’}. 
Suppose 1 < j < Lna’. We distinguish two cases: 1. a'(7) is a variable and 
2. (a'(s) is a variable). Define 

Di = uta! (j)uoxa'(y), 

f= (a'(3)()), 

b' = Arga'()), 

ce = {(k,0'(k)@) sk € Dom H}, 

Dy = Co(f) * Dyso(e, 2"(f), Impl (Univ(uo, 2"(f)) * (uort(f)«2"(F)*))) * 
(BY(3)), 

3 = DM, in case (uz), for 1 <u <2. 

Thus 1 < 7 < Lna' > Ds is a proof in t2{B'1,7 — 1]] of B'{z). Define 

D! = {j, Dt) : 7 € Dom B'}*. 
Then con (28.8), and thus (28.8). 
28.9 Thm. interp(z,uo,C', 2", Cy, Ci, t1,t2) & x! is a sequence of variables 
& Aisa formula of Langt; & RanFree AC Ranz' & Dj is a proof in tz 
of Impl(Univ(uo, 2’) * (Agiun))) > Dos.o(t, uo, C', 2", CY, 2', A, Dj) is a proof 
te of Alito) | 


Proof. Suppose hyp (28.9) and define 


y' = Enum{y € Rang’: y ¢ Ran Free A}, 
B' = {(j, Impl(Univ(uo, y'[7, Ln y']) * (AG49)))) : 
j € Domy'U {Lny' + 1}}. 
Suppose 1 < j < Lny’ and define 
Dj = (BY(3)) « Gu'(s) (ory (s)B'(9 + 1))) * C" * AXo(uo*Xo)) » 
Ds 35 (to*X0s Xo, y' (7) * (Sy'(9) (uory'(9))) * (B'G + 1). 
Thus 1 <j < Lny' — Dj is a proof in te[(B’(7))] of B'(j +1). Define 
D! = Dy * (B'(1)) * {(, Di) +7 € Domy’}*. 
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Then con (28.9), and thus (28.9). 


28.10 Thm. (interpretation theorem) interp(t,vo,C’,2",C§,CYy,t1,t2) & 
Dj is a proof in t, of A > Dg y(t, uo, C', 2", Cf, C}’, Dh) is a proof in tz of 


Alito) f 


Proof. Suppose hyp (28.10) and suppose 1 < j < Ln Dj. We distinguish 
five cases: 


. JB3zrJa(a is substitutable for z in B & D(j) = B,[a|S4rB), 
D,(j) is an identity axiom V D,(j) is an equality axiom, 

. Di) € Axth, 

. Di{7) is a tautological consequence of Dj|1,7 — 1], 

. dk(1 <k <7 & Di(z) can be inferred from Dj(k) by 3-introduction). 


Define B, z, and a as in (1), and define 


y' = Enum{y € Ran Free(B * a): y #2}, 
Dio = Dyg.g(t, uo, 2", Cg, a) * (Impl(Univ(uo, y’) * (uo*ary))) * 


(ug *a(i) 


(Bowe | 30 (work Bia) x 


(Impl(Univ(uo, 9’) * (Byuy)2[ 1) * (Aa (uo*2& Bei usy)))) * 
(Imp](Univ(uo, y Nt (Dy en) 


1 i 


= Dyg g(t, Uo, C', 2" »Co,a! »Do(a ‘), Dio); 


(Dol ad (D(a), 
CHD 


z' = Free Dijl, ae 

Diy = {(k, Do(k)) +k € Dom Dji1,7 — 1} # 
(Iimpl(Univ(uo, 2’) * (Do) (,u0))))s 

Di = Dyg g(t, uo, C', 2", Cg, 2', Do(3), Dio)- 
Define k as in (5), define zp, C, and D as in 

dzpdC AD (xo is a variable & C and D are formulas & 
=(zo is freein D) & Do(k) =CSD & Diz) = su0CD), 
and define 

x = Free Dj(y), 

Ds = (Impl(Univ(up, xp) * (uo*2o) * (Cieun)) * (Diiuny))) * 
(up 4 20& CG.) Empl(Univ(uo, 25) * (Dei)))) * 
(Azo(uo* 208 C4 4.)) SImpl(Univ(uo, 25) * (Dius)))) * (Dg(a)""), 
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Dg = Di, in case (uw), for 1 <p <5. 
Thus 1 <j < Ln Dj — Dj is a proof in 
tp[Ran{(l, Di)" : L © Dom Dil1, 75 — 1)} 
of Dg(7). Define 
D! = {(7, Dt) :7 € Dom Dh}*. 
Then con (28.10), and thus (28.10). 
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Chapter 29 


The arithmetization of 
arithmetic 


Now we can begin to prove results about predicative arithmetic within 
predicative arithmetic. In this chapter we will arithmetize Robinson’s the- 
ory and show it to be tautologically consistent (and we do this within a 
theory that is interpretable in Robinson’s theory). 


29.1 Def. 6 = Foo. 

29.2 Def. S = Fy. 

29.3 Def. P= Fy. 

29.4 Def. ¥ = Fro. 

29.5 Def. >= Fo. 

29.6 Def. Sa =Sxa. 

29.7 Def. Pa=P xa. 
29.8 Def. atb=F«axb. 
29.9 Def. ab =7*a*d. 


If x is the v** variable in alphabetical order, we use X as an abbreviation 
for Xz. (Recall that D is S---SO with v» occurrences of S.) Also, we use 
{a,,...,a,} as an abbreviation for {ay} U---U {a,}. 
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29.10 Def. Qo = ({0,5,P, ¥,*} (8220, Sz=8y4=9, 27023, 
xi Sp=S(z79), £020, ESP=TGHLE, Pe~gesSy=z0 (z20EG9=0)}). 


29.11 Def. a is a variable-free term of | a is variable-free & a is a term 
of I. 


29.12 Thm. a is a variable-free term of Lang Q) — [!f(f is a function & 
Dom f = Termsa & VbVc(be Domf & ce Domf > (1) & --- & 
(6))), where 

1. f(8) < Expln(2, 6) < 8, 

2. (0) =0, 

3. Be Dom f — f (85) = = Sf (bd), 
4. Bbc Domf > F(R) = se 
5. b¢e € Dom f > f(bte) = ae is (c), 
6. Be € Dom f > f(b'c) = f(b) - f(c). 


Proof. Suppose hyp (29.12) and write a as an abbreviation for 
scopes (29.12) 
but with Dom f = Terms a replaced by 
Dom f ¢ Termsa & Vb(6 € Dom f — Terms6 € Dom f). 


Let f = Max fa. We have a: Domf < Termsa, Supf < a and we have 
a0], so @ holds by MAX. 

Suppose dd(d € Termsa & d ¢ Dom f). By BLNP there exists a min- 
imal such d. Then there exist b and e such thatd-Ov (be Domf & 
ceDomf & (d= Sbvd=Pbv d= bicvd=b'e)). 

Suppose d = 6 and let f, = fU {(G,0)}. Then ay[fil,sofi < fia 
contradiction, and thus d # 0. 

Suppose d = $b and let f, = f U{ (Sb, S/())}. Then 


fiSd) = (8) +1. er 44 < ale® < Bs, 


so a,|f,| and thus d # So. 
Suppose d = Pd and let f, = f U {(Pb, Pf(6))}. Then 


fi(Pb) = f(b) —1 < 2b0? < gin < By, 
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so @y| fi] and thus d # Bo. 
Suppose d = bte and let fy = f U {(bte, f(b) + f(c))}. Then 


fi(bZe) = f(b) + f(e) < glint 4 gbne < obnbthne < gl (b¥2) < bie, 


so a;(f;| and thus d # b+. 
Hence d= bre. Let fy = f U {(b ec, f(b) - f(c))}. Then 


fi(dc) = f(b) “ T(c) < ginb oLne _ gbnb+Lne < gbn (bc) < We, 


so a,(f;| and thus Dom f = Termsa, and we have scope3; (29.12). 

Suppose scopexs (29.12) [fi], and suppose Jd(d & Termsa & f(d) # 
f,(d)). By BLNP there exists a minimal such d, which is impossible. Thus 
f = fi, thus con (29.12), and thus (29.12). 


29.13 Def. Valfna = f — hyp(29.12) & scopes:y (29.12), otherwise f = 1. 
29.14 Def. Vala = Valfna(a). 


29.15 Def. A is a variable-free formula of | «+ A is variable-free & Aisa 
formula of 1. 


29.16 Thm. A is a variable-free formula of Lang Q, & Be AtomsA — 
Ja3b(a and 6 are variable-free terms of LangQ, & B= a=b). 


Proof. Suppose hyp (29.16). Then (B(1}) is a predicate symbol, so 
{B(1)} = =. Hence there exist a and 6 such that a and 6 are variable-free 
terms of LangQ, & B = a=b. Thus (29.16). 


29.17 Thm. A is a variable-free formula of LangQ, > J!v(v is a truth 
valuation on A & Vavb{a=b G Domv — (v(a=b) = 1 Vala = Vald))). 


Proof. Recall the defining axiom (24.6) for truth valuations. Write a 
as an abbreviation for scope, (29.17) but with “v is a truth valuation on 
A” replaced by rhs (24.6),[A] but with Domv = Formulas A replaced in 
it by Domv = FormulasA & VB(B € Domy — Formulas B C Dom v). 
Suppose hyp (29.17) and let v = Max va. We have a: Domv < Formulas A, 
Supv < 1 and we have a,|[0], so a holds by MAX. Suppose 


4B(B € Formulas A & B ¢ Domv). 
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By BLNP there exists a minimal such B. By (29.16) there exist a, 6, C, 
and D such that a and 6 are variable-free terms of LangQ, & (B= ab 
vV(CeEDomy & DeDomy & (B=7%C v B=CVD))). 

Suppose B = a=b. There exists z such that (2 = 1+ Vala = Valb) 
& (z=0+ Vala Z Vald). Let », =v U {(B,z)}. Then a,|vy], so 1 <-v, 
a contradiction, and thus B # a=b. 

Suppose B = “C and let vy; = vU {{B,1 — v(C))}. Then o,[v,] and 
thus B = CVD. 

Let v, = v U {(B,Max(v(C),v(D)))}. Then a,/vi], which again is a 
contradiction, and thus scopes), (29.17). 

Suppose scope3, (29.17), |v;] and suppose 


4B(B € Formulas A & v(B) # v1(B)). 


By BLNP there exists a minimal such B, which is impossible. Thus v = v1, 
thus con (29.17), and thus (29.17). 


29.18 Def. Truthfn A = v © hyp(29.17) & scopes, (29.17), otherwise 
vol. 


29.19 Def. Truth A = Truthfn A(A). 


29.20 Thm. A is a variable-free formula of Lang Qo & (B is an identity 
axiom V B is an equality axiom V B € AxQ,) & A is an instance of B 
— TruthA=1. 


Proof. Suppose hyp (29.20), and let v = Truthfn A. 

Suppose 1: B is an identity axiom. Then there exists a such that a 
is a variable-free term of LangQ, & A = a%a. Then v(A) = 1 since 
Vala = Vala. Thus (1) — con (29.20). 

Suppose 2: B is an equality axiom. Then there exist a,, b\, a2, and 
be such that a,, 61, @2, and by are variable-free terms of Lang Qy & 
(A = 620 Vv A = ab, 80,28), V A = a) 2b, SPa,=Pb, V A = 
a £b, Sa92bp Sayfa, 2b tb; V A = 0, %byMag%byayagXby-bg V A = 
yb, ay by ay = ay); =by). Then v(A) = 1 and thus (2) — con (29.20). 

Suppose 3: B € AxQ,. Then v(A) = 1 and thus (3) — con (29.20). 
Thus (29.20). 


29.21 Def. A is an open formula @ A is aformula & ~(3 occurs in A). 
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29.22 Def. ¢ is an open theory « ¢ is a theory & Axt is a set of open 
formulas. 


29.23 Def. Neg A’ = {{1, “A'(z)) 17 € Dom A’}. 


29.24 Def! t is tautologically consistent < ¢ is an open theory & —=3A'(A' 
is a sequence of formulas of Langt & Disj Neg A’ is a tautology & 
VA(A € Ran A’ > JB((B is an identity axiom V B is an equality axiom V 
Be Axt) & Ais an instance of B))). 


29.25 Def. Subo(A,e) = Arreea | {(t,€) : 7 © Dom Free A} |. 
29.26 Thm. Q, is tautologically consistent. 
Proof. Suppose scopes: (29.24),{Qo}. Let 


Al, = {(4, Subp(A'(2),0)) 17 € Dom 4’}, 


and let v = Truthfn Dis] Neg Aj. Then Ap € Ran Aj — v(Ao) = J, by 
(29.20), so v(Disj Neg Aj) = 0 by (24.20). This is a contradiction, and thus 
(29.26). 


Chapter 30 


The consistency theorem 


We have already discussed the Hilbert-Ackermann Consistency Theo- 
rem of [Sh,§4.3] in connection with Assertion 18.1. This theorem is basically 
an algorithm for eliminating quantifiers from proofs. The first step is to 
eliminate each use of 4-introduction; this is done by introducing special 
constants and special axioms. Then the formulas belonging to special con- 
stants are eliminated, beginning with special constants of maximal rank. 
We follow [Sh,§4.3] closely. 


30.1 Def. spconstseq(7’, 2’, C',t) <> 1’ is an injective sequence of constants 
& 2x isa sequence of variables & Lnr’ = Lnz’= Lac! & {(i,d2"(2)C'(2)) : 
t € Domr'} is a sequence of closed formulas & Wivj(1 <i <7 < Ln?’ 
—> ~(r'(t) occurs in C’(7))) & tis a theory & LanginRanr’=0 & 
NisC'™ C LangtU Ranr’ & Sup?’ < Fotstny. 

30.2 Def. ideqax(A,t) < Vo(u © Nils A > v € Langt V v is aconstant) & 
AB(A is an instance of B & (B is an identity axiom V B is an equality 
axiom V B é€ Axt)). 

30.3 Def. belongs(A,7,7',2',C!)) o (1 <i < ine & rii)sr & 
(A = J2'(1)C'(1) SC'(2) ey) [7] V Ja(a is a variable-free term & 

A= C(t) ¢9 [a] 32"(1)C"(2)))). 

30.4 Def. Rank A = Deg(3, A). 

30.5 Def. delta(A’,r',z',C’,t,n) <> spconstseq(7',z',C’,t) & A’ is a se- 
quence of closed formulas & Nis A'* C LangtU Ranr’ & VA(A € 
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Ran A’ -> ideqax(A,t) V (1 <i < Lnr’ & Rank =2'(1)C"(t) < 
belongs(A,r'(z), r’, z',C’))). 
30.6 Def. delta;(A’,r',z',C',t,n,) + delta(A'r’,2',C',t,n) & 
Ran {(1,52'(2)C'() SC) aqy[t'(2)]) si ¢ Domr'} C Ran A’. 
30.7 Def. deltag(A',t,n) © dr'3z2'IC' delta,(A',r', 2',C',t,n). 

We have rhs (30.7): Lnr’ < Ln A’, Supr’ < Fotsina, Luna’ < Ln A’, 
Sup z' < Sup A’, LnC’ < Ln A’, Sup C" < Sup A’. 
30.8 Thm. D' is a proof int of A & Aisaclosed formula & 
SupRank o D'<n & «(27 LnD’) > 3A(Ln A’ < (27 LnD')-1 & 
SupLno A! < 2-SupLno D!' & deltag(A’,t,n) & A is a tautological 
consequence of A’). 

(See Lerma 1 of |Sh,§4.3].) Proof. Suppose hyp (30.8). There exists f 
such that exp(2,2 7 Ln D’, f), Let kK =27217 LnD’, let 

r= {(t, Fors) 22 € Dom D’}, 
and write a for 

Sr§(Ln ry = Ln Free D'(i) & Ranrj C Ranr'[iz,LnD'! & 
Ao = D'(t) Free pi [75]}- 
We will prove that 

1.1<2< InD! > VAg(a > =Ah(Ln Ah < f(t) -—1 & Ln Ai < Logk 
& Ln Sup Aj < SupLn o Aj < 2-SupLn o D! < Log ((Maxm Ln 0 D')?) & 
Sup Sup Ag < Sup Sup D'+ Fors; & deltag(Ab,t,n) & Apo is a tautological 
consequence of Aj)). 


A 
3 
R 


Suppose 42—(1). By BLNP there exists a minimal such 1. Suppose 
2. D'(t) € Axt V D'(7) is a logical axiom 


and suppose a. Let Aj = (Ao). Thus (1), a contradiction, and thus ~(2). 
Suppose 


3. D'(i) is a tautological consequence of D'{1,1 — 1] 


and suppose a. Then there exists rq such that scopes, a. Recall the defin- 
ing axiom (29.25) for Subp, and let 


Dg = {(9, Subo(D' (J) ree pay 701, 7'(2))) : 7 € Dorn D"[1, 7 — 1}. 
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Then Ap is a tautological consequence of Dj. Let 
DY = {(9,Min Ap scopesas, (1):,4;,[9, Do(s)]) : 7 € Dom Dy} 
and let Aj = D{*. Thus (1), a contradiction, and thus ~(3). Therefore 
aj(l <j <i & D'(c) can be inferred from D'(j) by introduction), 
so there exist 7, k, B, and C such that 
1<j<i & risa variable & Band C are formulas & 
-(z is free in C) & D'i(i)=sacBSC & D(j)=BSC. 
Suppose a, so that there exists rj, such that scopes,) a. Let 
Bo = Brree v'(i) [7's 
Co = Crree (i) {7515 
so that Ay = JzByCp. There exists Aj, such that 
seopesza! (1)s,45,41,19> Boz 7"(9) Co, A}]- 
Let Al = A’ « (4rBo™ Boz[r'(j)]). Observe that 
Ln Sz Bo Boz[r'(j)! = 2-Ln Bo +4 < 2-Ln D'(i). 


Thus (1), a contradiction, and thus (1). Let ¢ = Ln D' and let Ap = A. 
Since A = D'{7) we have con (30.8) by (1), and thus (30.8). 


30.9 Def. A’ is a special sequence © A’ is a sequence of formulas & 
Dis} Neg A’ is a tautology. 

30.10 Thm. eisaconstant & D'isa proof int of exe & Sup Rank oD! <n 
& «(2 7 Ln D') = GA'(deltao(A',t,n) & A’ is a special sequence & 
Ln A'< 27D! & SuphLn o A’ <2-SupLno D’'). 

Proof. Suppose hyp (30.10). By (30.8) there exists Aj such that 
deltao(Ag,t,n) & Ln Ay < (27 D')—1 & e#e is a tautological consequence 
of Ab. Let A’ = Af * (e#e). Then con (30.10), and thus (30.10). 

30.11 Def. Belongs(A’,r’,2',C',n) = {r © Ranr’: 4A3¢(A € Ran A’ & 
l<i<Lnr! & r{i)=r & belongs(A,7,r',2',C') & 

Rank 3z'(z)C'(z) = n)}. 

30.12 Def. spdelta({A',r',2’,C',t,n,m,l) © delta(A’,r',2',C',t,n) & 
Card Belongs(A',r',2',C'n) =m & Ln A) <1 & Lnr' <1 & SupLnod’ < 
1 & SupLn oC'<! & tisanopen theory & A’ is a special sequence. 
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In [Sh,§4.2], the special constant r for the closed instantiation 3xA is 
denoted by the letter c with the subscript JxA. This is a beautiful device, 
which is exploited in the proof of the Consistency Theorem, but a direct 
arithmetization of it would lead to explosive growth in the size of special 
constants. Notice that the formula A may itself contain a special constant s. 
Now r may occur in an expression u without s occurring in u, but s will 
appear in u in the subscript of r. The following defining axiom expresses 
this notion. 


30.13 Def. appears(r,u,r',C") © aj"(Lnj! < Lnr’! & Supj'’ < Supr’ & 
(yar & W(L<7 < Lng’ > r'(j'(z)} occurs in C'(g"(f +.1)) & 
r'(j'(Lnj')) occurs in w)). 

30.14 Thm. up occurs in u & vo is a truth valuation on up > Jv(v is a 
truth valuation on u & v9 C v). 


Proof. Suppose hyp (30.14). Write a for 

Domvp C Domy C Formulasu & Supvy <1 & VB(=B € Domv 
> BeDomv & v(*B) = 1-—2(B)) & VBVC(B and C are formu- 
las & BVC € Domvy + Bé Doms & CE Domv & v(BYC) = 
Max(v(B), v(C))), 
and let v = Maxva. We have a,|v9|, so a holds by MAX. Suppose 

JB(B € Formulasu & B ¢ Domv). 
By BLNP there is a minimal such B. Suppose 1: B is an atomic for- 
mula Vv (B(1)) = 3, and let v; = vU {(B,0)}. Then a,|v3), so 0 < v, a 
contradiction, and thus —(1). Therefore there exist B, and C; such that 
B,€ Dom & C, € Domv & (B= 7B, V B= BC). Suppose 
B= >By, and let v; = vU{(B,1—(B))}. Again we have a contradiction, 
and thus B = B,VC,. Let v1, = v U {(B, Max(v(B,), v(C;)))}. This gives a 
contradiction, and thus Domv = Formulas u. Thus (30.14). 
30.15 Thm. spdelta(A',r',z',C',t,n,m,l) & m#0- 
FAN Arh zhICh(spdelta( A,r), 25,Ch,t,n,m— 1,1?) & Sup(Ah* « Ch*) < 
Sup (A'* «Cl «7rh*) & Supa <Supz'). 

(See Lemma 2 of |Sh,§4.3].) Proof. Suppose hyp (30.15) and suppose 

1. {4 5z"(2)C'(2)) +7 € DomC"} is injective. 
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Let 
t = Mine(1<i< nr’ & r'(2) © Belongs(A’,r’,2’,C',n)), 
r=r'(24), 
gc=2' (th), 
B=C"(i), 


Ai = Enum{A € Ran A’: sbelongs(A,r,r', 2, C'}}, : 
A = Enum{A € Ran A’: belongs(A,7,7’,2',C") & A # i2BB,/r]}, 
a’ = {(7,a):7 € Dom A, & min, A}(s) = Bfa|SAzB}. 
Then 
2. Al = {(j, Be[a'(j)|S4zB) :j € Doma’} 
and 
3. Ran(A, * 44) C Ran A’ C Ran(Als Ab + (2B B,{r])). 
We will prove that 
4.1<i¢< Ln Al > =(S2B occurs in A}(:)). 
Suppose 4(4). Then —(A{(r) is an open formula), and since ¢ is an open 
theory, ~idegqax(Aj(z),¢). Therefore there exists s such that 
belongs(Aj(2), 5,7’, 2", C’). 
There exist y, C, and a such that 


y is a variable & C is a formula & a isa variable-free term & 
(Ai(t) = ayo>Cyfs| v Ay) = Cyja}SdyC). 
But since Rank 4JzB = n, it follows that =(4xB occurs in C,[s] v 32B 
occurs in C,[a}). We have 32B # SyC by (1), so =(32B occurs in 4yC). 
Thus —(4) implies (4), and hence (4). - 

We want to express the notion of replacing each occurrence of 1zB by 
B,|r]. We will prove that 


5. 4g(Domg = Formulas Dis} Neg A’) & VAVA\VA2Vz(A € Domg & 
A; € Domg & A, € Domg & zis a variable > (i) & --- & (vii)), 
where 
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i. Lng(A) < Ln A, 
ii. Supg(A) < SupA-+r, 
iii. A is an atomic formula — g(A) = A, 
iv. A= =2B — g(A) = B,/r], 
v, A= 5A; = g(A) = “9 Ai), 
vi. A= A,VA2 > g(A) = g(A1)VG(A2), 
vii, A= 452A, & AF zB — g(A) = Szg(Ay). 
Write a as an abbreviation for scopes, (5) but with 


Dom g = Formulas Disj Neg A’ 
replaced by 
Domg C Formulas Disj Neg A! & VA(A € Domg — Formulas A C 
Dom), 
and let g = Maxga. We have a,(0], so a holds by MAX. Suppose 
3A(A € Formulas Dis} Neg A’ & A ¢ Domg). 
By BLNP there is a minimal such A, which is impossible. Thus scopes, (5), 
and hence (5). 
Let 
Ay = {(9, Bela!(7)|Ba[r|) : 7 € Doma}. 
We will prove that 
6. Aj * A} is a special sequence. 
(See (1} of [Sh,§4.3].) Suppose v is a truth valuation on Disj Neggo A’. Let 
vp = {{A,v(g(A})) : A € Domg}. 


Then vp is a truth valuation on Disj Neg A’, so there exists ¢ such that 
1<i< Lind’ & w(=A'(t)) = 1. Therefore v(g(A'(i))} = 1, and so 
u(Disj Neg o A’) = 1. Thus go A’ is a special sequence. Recall (3). We have 
goAi = Al by (4), go Ab = Ad by (2), and g(32BB,[r]) = B,|r|=B,[r], 
so that g(JzB=B,/r]) is a tautology. Hence (6). 

We want to express the notion of replacing r by a'(j) everywhere it 
appears, including appearances in subscripts of special constants. Let 


r= Minr) (Lar, = Lnr'- Lna’ < Log(r' #0’) & Supr, < Four & 
r{ is an injective sequence of constants & Ranr,™(Langt U Ranr’) = 0), 
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r= (9, {@,ri((7 — 1)-Lnr' + 1t)): 1 € Domr'}): 7 € Doma’}, 
q = {t € Domr' : appears(r, C'(z),r', C’)}, 
ro = {9,{(i, re) 10 € Dom! & (@¢q>an=r(t}) & 
(@€q > 72 =ri(j)(2))}): J € Doma}, 
h! = {(j, {((A, Sub(Ssub( A,r‘, r4(7)), 7, @’(7))): A © Formmlas (A) *A§)*}): 
j € Doma’}. 
(To compute h'(7)(A), first replace all the special constants r‘(t) such that 
r appears in C’(z) by the new special constant r{(j)(z) and then substitute 
a'(j) for each occurrence of r.) Let 


AL = (0, {{h, h'(7)(Bz | a'(k) |) +B,[a'(z)|): & € Doma'}): 7 € Dom a'}. 
Suppose 1 <j < Lna’. Since Aj + Aj is a special sequence, h'{j) 0 (A) * Aj) 
is a special sequence. But h'(j)(B) = B since —appears(r, B,z’,C'), so 
h'(j)(B.[r|) = B,[a'(j)]. Thus 

7.1< 37 < Lna! = (h'(j) 0 Aj) * AG(y) is a special sequence. 

(See (2) of [Sh,§4.3].) 

Let 

AG = Al * {(7,h'(7) 0 Al) 7 € Doma'}*. 
We will prove that 

8. Aj, is a special sequence. 

Suppose —(8). Then there exists vy such that 

Uo is a truth valuation on Disj;Neg AQ & Wivj(1 <1 < Lnr’ & 
D<gsbna@'  of(A'(i)) = 1 & p(h'(g)(A4(2))) = 2). 

By (30.14) there exists » such that 


v is a truth valuation on Disj Neg Af * {(7, AY(J)*): 7 € Doma’}* & 
vo Cv. 


Suppose 1 < 7 < Lna’. By (7), 

Sk(L<k<Lna! & v(h'(7))(Bsfa'(k)])*Bzla'(9)]) = 0. 
Therefore v(B,/a'(j)]) = 0, and thus 

<j <Lnad' = o(B,[a'(7)]SB,/r|) =1. 
This contradicts (6), and thus (8). 
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Let 

ro = {Gi,rg):2€ Domr’ & (t¢g > ry = (r'(2))) & 
(8 Eg > rg = (r'()) * (19,710) (2) 2 7 © Doma'})}*, 

ay = {(t,25):t€ Domr & (§(¢q—> 23 =(2'(t))) & 
(§€q > 2h = (2'(2)) * (G9, 2'(2)) 7 € Doma'})}*, 

Ch={G,Cy):2€ Domr’ & (t¢q 7 CR= (C'(t))) & 
(6 q + Ch = (O(a) * {4,7} (C"(@))) 17 € Doma'})}*. 
Then spconstseq(ri,, x, Cj,t), Ln A < [?, Ln7y < 2, SupLn o A} < 2, 
Sup (Aj* + Ci*) < Sup (A* «Cy* * rf), and Sup zt, < Supz'. We will prove 
that 

9. Ao € Ran Ag -> ideqax(Ao,t) V Sso(so € Rani & 
belongs( Ao, 80,75, 29C4) & (80 € Belongs(A}, 7§, 25:Cg,n) > 
So € Belongs(A',r',z',C',n}) & so #r)). 
Suppose —(9). Then Ay ¢ Ran A}, so there exist 7 and k such that 1 < 
j< ind & 1<k< Lind’ & Ap = h'(z}(Aj(k)). Let A = Aj(k). We 
have ideqax(A,#) -> ideqax(Ao,t), so sideqax(A,t). Therefore there exists 
isuch that 1<i< Lnr’ & belongs(A,r'(z),7',2',C'). Let s = r'(c), let 
y = a'(2), and let C = C'(z). There exists a such that 

A= IyCSC,[s] V A= Cy/a]=Syc. 
Let Co = h'(z)(C), let so = h'(z)(s), and let ap = h'(7) (a). Then 

Ag = JyCo™Cpy! 50] ¥ Ao = Coy! ao] ayo. 
We have s # r, so there exists 7) such that 

V<igo<bnrg & so =r5(to}) & Co= Cite) & y= zG(t0). 
Hence belongs( Ao, so, 7, Cj). Suppose sy € Belongs( Ao, 74, 29,Co,7). Then 
Rank dyC = Rank tyCo = n. By definition of 7; and (30.1), 

a appears(r, sr’, 2’, C’) 
and so So = h'(j)(s} = s. Thus (9), a contradiction, and thus (9). Hence 
spdelta( A}, 76,25, C4,t,2,m — 1,17). 

Thus (1) — con (30.15). Now let 

i = Enum{i € Dome’: -3j(1<j <i & Se'(g)C'y) = 32'()C'(d))}, 


ker el yt 
re= rot, 
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r=s'or', 

re = (rg) :2€ Dome’ & min, (d2'(7)C'(7) = 32'(e)C"(i))}, 

Ch = {(k,Ssub(C"(a"(k)),r',76)) : & € Domz'}, 

Ay = {(4, Ssub(A'(z),r',76)) 57 € Dom A’}. 

Then spdelta(A},73,25,Cg,t,n,m,l) & (lac: [2gC§]. Hence con (30.15), 
and thus (30.15). 

30.16 Thm. spdelta(A',r’,2',C’,t,n,m,l) & e(l) & e(2TI) & 

e(1T 271) > JAGSrh dz) 5Chsmo(spdelta(A}, 6,25, Ch, t,n-1,mo,1 1 27) 
& Sup (Ap* « Co*) < Sup(A™ + C’* « rh) & Supzt < Supz’). 

Proof. Suppose hyp (30.16). Observe that m < I. Clearly m = 0 -> 
con (30.16), so suppose m # 0. There exists f such that exp(2,/, f) and 
there exists g such that exp(!,2Tl,g). Leth =gofandk=27I7 271. 
We will prove that 

li <i<m —- 3AjSr{ Se) 4C\(spdelta(A},rj,z},C},t,n,m — 7, h(2)) 
& Sup (4}* « Ci*) < Sup(A* «CC ari) & Supz <Supz'). 

Let a = Max(Sup (A’* * C'*), Forstoge). We have 

(1): Ln A, < Log k, Ln Sup Aj < Logk, Sup Sup A} < a, Lnr < Logk, 
Supr, < a, Lnz < Logk, Sups, < Supz', LnC} < Logk, LnSupC} < 
Log k, Sup Sup C} < a. 

Suppose 3ia(1). By BLNP there exists a minimal such 2, which is impos- 
sible by (30.15). Thus (1). By (1};/m — 1] and (30.15) we have con (30.16). 
Thus con (30.16), and thus (30.16). 

30.17 Def. expcomp(l,n,f) Vili é Domf oi<n) & fe) =! & 
Vitt<n— Jala < f(t+1) & Logais a power of two & Log Loga = f(z) 
& s(i+1) = Explos(f(i),a)). 

30.18 Thm. expcomp(l,n,f) o Viti c Domf oi<n) & f(X)=1 & 
wili<n— elf()) & e(21S()) & flE+1) =F) 121 Fe) 

Proof. From (30.17). 

30.19 Def! og(i,n) — Sf expcomp(l,n, f). 
30.20 Thm. 1, <1 & ny <n & oo(l,n) > oll, m1). 

Proof. Suppose hyp (30.20). There exists f such that expcomp(l,n, f). 
Let g = {(t, f(2)) :t€ Domf & 1 < ny}. Then expcomp(!,ni,g). We will 
prove that 
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1.2 < ny > Jh(expcomp(!,,7,h) & Vi(7 <1 > h(Z) < g(z))). 
Suppose 37-=(1). By BLNP there exists a minimal such 7. Clearly 7 # 0. 
Therefore there exists hy such that scopes, (1);,[¢ —1,hij]. Let h = hy U 
{(i,ka(i— 1) 12 t Aa(t —1))}. Then (1), a contradiction, and thus (1). By 
(1);[na} we have oo(l;,71), and thus (31.20). 

30.21 Thm. oo{l,n) & k <1 7271 + oo(k,n — 1). 

Proof. Suppose hyp (30.21). There exists f such that expcomp(I,n, f). 
We will prove that 

1.i<n-~1— Jh(expcomp(k,i,h) & Vi(7 <i > A(z) < f(y + 1))). 
Suppose 3¢—(1). By BLNP there exists a minimal such 1. Clearly i # 0. 
Therefore there exists hy such that scopes, (1)i,{t — 1,41]. Let h = hy U 
{(t, hi(i~ 1) 1 2 T Ai(i-1))}. Then (1), a contradiction, and thus (1). By 

1), | ~ 1] we have oo(k,n — 1), and thus (30.21). 
30.22 Thm. spdelta(A',r’,2’,C',t,n,m,l) & oo{l,n +1) > 4Aj(AG is a 
special sequence & WAp(Ap € Ran Aj — ideqax(Ao,#))). 

Proof. Suppose hyp (30.22). There exists f such that 

expcomp(/,n + 1, f). 

Then e(f(n)). Let kK = 27 f(n). We will prove that 

lLi<n-s Sats 3G aim endeltat Ay ei Ouits n — i,m, f(2)) 
& Sup(Ay** Ct*) < Sup(A* «CM art) & Supz, < Supz'). 

Let a = Max(Sup (A # C!*), Fositoge)» We have 

(1): Ln Aj < Logk, Ln Sup A, < Logk, SupSup A} < a, Lnr, < Logk, 
Supr, <a, Lnz < Logk, Supz, < Supz', LnC) < Logk, LnSupC} < 
Log k, Sup Sup C} < a, m, < Logk. 

Suppose 3i-(1). By BLNP there exists a minimal such 7, which is im- 
possible by (30.16). Thus (1). By (1);/n] we have con (30.22), and thus 
(30.22). 
30.23 Thm. ¢ is an open theory & OD?! is a proof in t of Xue#Xo & 
k = Max(2 7 (Ln D' + 2),2-SupLn o D’)) & n= SupRankoD! & 
0o(k,n + 1) — (t is tautologically consistent). 
Proof. Suppose hyp (30.23). Let to = (Lang ¢ | U 1 {0}, Axt) and let Di = 
D'*(Xo#Xo)# (640). Then D’, is a proof in ty of 640. Observe that Ln Dj = 
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Ln D’ +2, so that 2 t Ln Di, < k. Also, Sup Ln o Di, = Max(Sup Ln c D’, 4). 
But since Ln D' > 1 we have k > 2° = 8 = 2-4, so that 2-SupLn o Di <k.. 
By (30.10) there exists Aj such that 

delta(A§,to,) & Aj is a special sequence & Ln A} <k & 

SupLn o A, < k. 

There exists rj, xh, and Cf such that deltay(Aj,rp, 2), Ch, to, 2), so there ex- 
ists m such that spdelta(A§, rh, xp, Ch,t),2,m,k). By (30.22) there exists Aj 
such that Aj is a special sequence & VAj,(A, € Ran Ai — ideqax(A},to)). 
Let 

r, = Enum{r; € Nis Aj* : 1 ¢ Langt}, 

4 = {G,X;):7 € Domarl), 

Al = {(7,Ssub(Aj(t),74,24)) : 7 © Dom Aj}. 

By (30.22) we have con (30.23), and thus (30.23). 

30.24 Def! o(n) — oo(n,n). 

30.25 Def! t is o-consistent «+ ~3D'(D! is a proof in t of XoFX, & 
o(Ln D™)). 

30.26 Thm. (consistency theorem) t is tautologically consistent — ¢ is a- 
consistent. 

Proof. Suppose (30.26). There exists D' such that scope3p: (30.25). 
Let k = Max(2 7 (Ln D’ + 2),2-SupLn o D') and let n = Sup Rank c D'. 
Then n < Ln o D™ ~2 and k < Ln D™ 7 27 LnD", so by (30.20) and 
(30.21) we have oo(k,n + 1). This contradicts (30.23), and thus (30.26). 
30.27 Thm. Qo is o-consistent. 


Proof. By (30.26) and (29.26). 


Chapter 31 


Is exponentiation total? 


Why are mathematicians so convinced that exponentiation is total (ev- 
erywhere defined)? Because they believe in the existence of abstract objects 
called numbers. What is a number? Originally, sequences of tally marks 
were used to count things. Then positional notation—the most powerful 
achievement of mathematics—was invented. Decimals (i.e., numbers writ- 
ten in positional notation) are simply canonical forms for variable-free terms 
of arithmetic. It has been universally assumed, on the basis of scant evi- 
dence, that decimals are the same kind of thing as sequences of tally marks, 
only expressed in a more practical and efficient notation. This assumption 
is based on the semantic view of mathematics, in which mathematical ex- 
pressions, such as decimals and sequences of tally marks, are regarded as 
denoting abstract objects. But to one who takes a formalist view of math- 
ematics, the subject matter of mathematics is the expressions themselves 
together with the rules for manipulating them—nothing more. From this 
point of view, the invention of positional notation was the creation of a new 
kind of number. 

How is it then that we can continue to think of the numbers as being 
0, 80, SSO, SSSO, ...? The relativization scheme of Chapter 5 explains 
this to some extent. But now let us adjoin exponentiation to the sym- 
bols of arithmetic. Have we again created a new kind of number? Yes. 
Let b be a variable-free term of arithmetic. To say that the expression 
2° is just another way of expressing the variable-free term of arithmetic, 
SS0-SSO-...-SSO with b occurrences of SSO, is to assume that b denotes 
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something that is also denoted by a sequence of tally marks. (The notorious 
three dots are a direct carry-over from tally marks.) The situation is worse 
for expressions of the form 2 7 2 t b—then we need to assume that 2° itself 
denotes something that is also denoted by a sequence of tally marks. 

Mathematicians have always operated on the unchallenged assumption 
that it is possible in principle to express 2° as a numeral by performing the 
recursively indicated computations. To say that it is possible in principle is 
to say that the recursion will terminate in a certain number of steps—and 
this use of the word “number” can only refer to the primitive notion; the 
steps are things that are counted by a sequence of tally marks. In what 
number of steps will the recursion terminate? Why, in somewhat more than 
2° steps. The circularity in the argument is glaringly obvious. 

Although e(n) is inductive, one cannot prove Vne(n) in predicative 
arithmetic. Here are three arguments for this assertion. 

First, take a nonstandard element a of a nonstandard model of Peano 
Arithmetic. Then the set of all elements less than 2 | Loga 7 & for some 
standard k will be a model of Q4|Jn-e(n)]|. This is essentially Theorem 4.3 
of Parikh’s article Existence and feasibility in arithmetic |Paj, which ex- 
presses a viewpoint on the foundations of mathematics similar to the one 
developed here. This argument is model-theoretic; it shows how from a 
proof of Vne(n) in Q) to derive a contradiction in set theory. 

Parikh also proves essentially the following (Theorem 4.4 of [Pa]): Let D 
be a bounded formula such that +g, dyD. Then for some bounded term b 
not containing y, tg, Sy(y <b & D). 

As Sam Buss pointed out to me, this can be used to give a second 
proof that Yne(n) is not a theorem of predicative arithmetic. Let us use 
+t A to mean that A is a theorem of an extension by definitions of Q,. Of 
course, + Vne(n) if and only if F e(n), and - e(n) © Sf exp(2,n, f). But 
by Parikh’s Theorem 4.4, if Fg, Jf exp(2,n,f), then there is a bounded 
term b of Q, not containing f such that ta, Af(f <b & exp(2,n, f)). 
Since tg, exp(2,n,f) > f(n) < f, we would have + 2" < b, which is 
impossible. 

Parikh’s proof of Theorem 4.4 is finitary but impredicative. It uses 
Herbrand’s Theorem, and the bound on b is superexponential in the number 
of occurrences of symbols in the proof of JyD. The second argument shows 
how from a proof of Vne(n) in Q4, to derive a contradiction in a theory 
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containing Herbrand’s Theorem. 

In the definition in Chapter 7 of a bounded extension we required, for 
each defining axiom of a function symbol with right hand side D, that SyD 
be of bounded form. Since we have the existence condition it would suffice, 
by Parikh’s Theorem 4.4, to require only that D be of bounded form. But 
in the absence of 2 predicative proof of Theorem 4.4 it would be unwise 
to make only this weaker requirement. As we have developed predicative 
arithmetic, the proof that it is locally interpretable in Q can be arithmetized 
within the theory itself. 

The third argument, which will be outlined now, shows how from a 
proof of Vne(n) in predicative arithmetic to produce a contradiction in 
predicative arithmetic itself. 


31.1 Thm. Yne(n) —- ind, o(n). 


Proof. Clearly o{0). Suppose Vne(n) and suppose a(n). Then there 
exists f such that expcomp(n,n, f). Let 


g=fU{(In+1, f(r) 127 f(n))}. 
Then, since Vn e(n), we have expcomp(n,n + 1,9). Let 
h=gU{(n+2,9(n +1) 727 g(n + 1))}. 


Then expcomp(n,n + 2,h), and so 00(n,n + 2). But it follows from (30.21) 
that oo(n +1,n+ 1), i.e. o(n + 1). Thus ind, o(n), and thus (31.1). 0 
Suppose | Vne(n). Then + ind, o(n). Then (30.27) says that Qo is 
inductively consistent, which for many purposes is as good as full formal 
consistency. We exploit this as follows. First we arithmetize Q4. Since 
it has an axiom scheme, we do this by introducing “t is a Q,-theory” to 
express the notion of an extension by definitions (with an inductive re- 
striction on the number of new symbols) of a finitely axiomatized portion 
of Q4. In Chapters 23-28 we developed all the tools necessary {with a fill- 
able gap in the treatment of extensions by definition of a function symbol) 
to arithmetize the entire development of predicative arithmetic, so that, 
still under the assumption that | Vne(n), we have + f is a Q,-theory — t 
is o-consistent. The point is that all of our results in the arithmetization 
of logic took the form of constructing bounded function symbols, which are 
respected by o% if o is inductive. In this way (30.27) becomes an induc- 
tive self-consistency theorem, and we can employ the familiar reasoning of 
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Gédel’s Second Theorem to derive a contradiction. In doing this, we rel- 
ativize everything by o*; for example, we replace the notion of a proof by 
a proof such that the number of occurrences of symbols in it satisfies o7. 
Thus if + Vne(n) then predicative arithmetic is inconsistent. 

Without the impredicative assumption Vn e(n), the formula o(n) is not 
inductive. Nevertheless, we have o(0) and we have the rule of inference 


infer o(Sb) from o(b), 


where b is a bounded variable-free term. To see this, suppose F o(b), so 
that t 3f expcomp(b, b,f). The proof can be relativized by e$, where € is 
as in Chapter 14, so that | Sf(e}(f} & expcomp(b,b,f)). Therefore, as 
in the proof of (31.1), | 3g expcomp(b,Sb,g). Relativizing again by e4, we 
have + dg(e}(g) & expcomp(b, Sb.g)), so that | 3h expcomp(b, SSb,h), 
ie. F oo(b,SSb), and so + o(Sb). Thus if F o{b} then + o{Sb). 

We can think of o(n) as a formalization of the notion that n is a ge- 
netic number. We do not have the implication o(m) -» o(Sn) but only 
the inference, from o(b) infer o(Sb). The distinction expresses the crucial 
difference between the forrna]l and the genetic; it is the diflerence between 
sitting comfortably in camp and saying, “If I have climbed part way up the 
mountain, then I can always take one more step up the mountain” —and 
actually climbing a mountain, when each successive step requires an act. 

Hence (30.27) is a genetic self-consistency proof for predicative arith- 
metic. It is a remarkable feature of Robinson’s Theory that it can prove 
its own tautological consistency (29.26). This is made possible by the 
fact (29.12) that the numbers denoted by terms of the arithmetized the- 
ory are bounded by the terms themselves. For a theory T that is strong 
enough to refer to itself and to prove the full formal consistency theorem, 
or even an inductive version of the consistency theorem, T cannot prove 
its tautological consistency without being inconsistent, by Gddel’s Second 
Theorem. 

The title of this chapter is not a meaningful question to a nominal- 
ist. Instead we may ask, which formula is it more profitable to adjoin to 
predicative arithmetic, Vn e(n) or dn 7e(n)? 

Paris and Wilkie (see |P W} and [PW2]) have studied the effect of adjoin- 
ing Vne(n) and have obtained results relating this to adjoining consistency 
assumptions. There are a number of interesting questions as to whether 
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various results that can be proved with this hypothesis can be proved, or 
interpreted, without it. Certainly the theory with Yn e(n} adjoined is too 
weak to serve as a basis for much of contemporary mathematics. 

The principal objection to adjoining Vne(n) is that the consistency of 
the theory is doubtful. One can give a proof of its inductive consistency 
assuming that superexponentiation is total, or of its full formal consistency 
assuming that supersuperexponentiation is total. But to prove the consis- 
tency of the theories with these additional assumptions, one needs further 
assumptions yet. It is as if an attorney were to attempt to establish the re- 
liability of a client by bringing in a character witness, and then a character 
witness to the character witness, and so forth, each one more mafioso than 
the predecessor. Impredicative finitary reasoning is a residue of Platonism 
that has been uncritically accepted by the finitists. 

As we have seen, it is consistent to adjoin Jn e(n), provided only that 
Q is consistent. Therefore the resulting theory, which may be called Non- 
Peano Arithmetic, is logically very weak. Nevertheless, it is very strong 
mathematically. As Hook has shown in his Princeton thesis [Ho], it can 
be used to develop substantial portions of analysis, by means that will be 
discussed in the next chapter. 

Rather than adjoin Jn -e(n) to predicative arithmetic, one can try to 
prove it. This would of course entail the inconsistency of Peano Arithmetic. 
I have put a lot of effort into this, but so far without success. 


Chapter 32 


A modified Hilbert program 


Hilbert’s program was to secure the foundations of classical mathemat- 
ics by giving a finitary consistency proof for it. This formulation of the 
program was undoubtedly influenced by his controversy with Brouwer— 
finitary methods are those (or perhaps a subset of those) that are acccepted 
by the intuitionists. As far at least as arithmetic is concerned, Hilbert’s 
aim of demonstrating that classical mathematics is no less secure than is 
intuitionistic mathematics was achieved by Gédel’s five page paper [G62], 
published in 1933, in which he gave an interpretation of classical arithmetic 
within intuitionistic arithmetic. But by then the problem had been utterly 
transformed by his great, paper of 1931. Since finitary methods as com- 
monly understood can be arithmetized, Gédel’s Second Theorem doomed 
the Hilbert program. 

From a nominalist understanding of mathematics—from the viewpoint 
of Hilbert’s formalism taken literally—Hilbert’s program can be criticized 
on two counts. First, as I have argued at length, the acceptance of impred- 
icative finitary methods entails a view of mathematics that still contains 
a semantic element. Second, a convinced formalist should investigate the 
consistency of classical mathematics as a genuinely open question. 

Since the original Hilbert program failed, is it sterile to suggest a pro- 
gram with stricter requirements for acceptable evidence of consistency? 
Perhaps not; a modification of Hilbert’s program appears to be feasible. 

The modified program is to build up, parallel to classical mathematics, 
a demonstrably consistent elementary mathematics such that most results 
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in the core of classical mathematics have an elementary analogue with the 
same scientific content, and such that the equivalence of the classical to the 
elementary result is easily provable by classical means. 

Here is a candidate, which I will call Q*, for such an elementary math- 
ematics. To begin with, Q* should contain predicative arithmetic. With a 
positive solution to the compatibility problem of Chapter 15, it would be 
easy to make precise what this means. Lacking this, we must proceed in a 
more piecemeal way. The theory Q* is to contain Q4, the higher # symbols 
introduced by Hook |Ho], and semibounded replacement as in Chapter 22. 
Adjoin a unary predicate symbol ¢ and the axioms that say that ¢ respects 
each bounded function symbol and bounded nonlogical axiom. Adjoin a 
constant N with the axioms e(.N), «(2 7 N), e(2 121 N),... So far, the 
theory is locally interpretable in Q. Finally, adjoin the axiom —¢(N). 

Here is a consistency argument for Q*. Let us omit the higher # sym- 
bols; the conceptual issues are the same. Interpret ¢ as e*. Then, as we 
have seen, Q4|in-¢(n)| is consistent if Q is. In this theory, introduce a 
constant No with ~d(No) and introduce N by N = Log... Log No, with 
vy 4 1 occurrences of Log. Then we cannot prove ¢(N), for if we could, 
then by v + 1 successive relativization arguments we could prove ¢{No). 
Therefore it is consistent to adjoin ~¢(N), and we have e(N), e(2 7 N), 
..- and e(2f--- 727 N) with v occurrences of 2 (and v is arbitrary). 

This is a finitary but impredicative consistency proof for Q*; the se- 
mantic element in the proof enters in the usual proof that @ is consistent. 
which involves the assumption that superexponentiation is total. A proof 
of the inductive consistency of Q* can be based on the assumption that ex- 
ponentiation is total (so that a(n) is inductive). There are indications that 
it should be possible to demonstrate the genetic consistency of Q* with no 
appeal to semantics at all, that Q* is truly demonstrably consistent, but 
such an investigation must await the future. 

The formula ¢(n) is similar to the formula “n is standard” in one ver- 
sion Ne} of nonstandard analysis; the axioms of Q* asserting that ¢ re- 
spects all bounded function symbols and bounded nonlogical axioms have 
the consequence that if Fox D, where D is bounded, then Fox D?*—this is 
similar to the transfer principle of nonstandard analysis; the axiom —¢(N) 
is similar to the idealization principle of nonstandard analysis; the use of 
a many-sorted theory in Hook’s thesis [Ho] is perhaps similar to the stan- 
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dardization principle of nonstandard analysis. What we have in Q* is a 
grafting of Abraham Robinson’s extremely powerful methods of nonstan- 
dard analysis (see |Rn]) onto Raphael Robinson’s theory. 

The theory Q* is logically very weak but mathematically very strong. 
The number N such that ~¢() is in some sense an infinite number, since 
is inductive, and yet the axioms e(N), e(2 t N),... allow us to construct the 
set of al] numbers smaller than N and iterated power sets of this set. Once 
one has an infinite, or in a better terminology an unlimited, natural number, 
one has infinitesimal rational numbers, and one can introduce rea] numbers 
as a new sort of object: a real number is a limited rational number, and two 
real numbers are equal in case their difference is infinitesimal; see [Hoj. In 
this way, Hook develops a substantial portion of rea] and p-adic analysis. 

Probability theory is very well adapted to such an approach. Con- 
sider the set of all 2" paths indexed by the rational numbers k/N for 
k = 0,...,N, each of which goes up or down by 1//N at each step. This 
is an elementary nonstandard model of Brownian motion and, for example, 
Wiener’s theorem that the paths of Brownian motion are almost surely con- 
tinuous can be given an elementary formulation and proof in this context. 
Also, the classical form of Wiener’s theorem is easily deducible from the 
elementary form by classical, non-elementary means. This will be discussed 
in detail in a book |Ne2] that is in preparation. 

J am not, of course, suggesting that classical mathematics should be 
abandoned in favor of an elementary mathematics such as Q*. Any theory 
is consistent until proved inconsistent. But I am confident that the modi- 
fied Hilbert program will repay the efforts of those who find it interesting. 
The advent of computers has raised the problems of computational com- 
plexity to a position of central importance in mathematics. In the world 
of feasible computations, exponentiation is not total. For results relating 
questions of computational complexity to syntactical questions in portions 
of arithmetic, see ‘Bu! and the references cited there. Nonstandard analysis 
and computers are recent. developments that are transforming mathematics, 
and the semantical interpretation of mathematics is perhaps unsuitable for 
both of these developments. I hope that a mathematics shorn of semantical 
content will prove useful as we explore new terrain. 
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Qs 60 
Q4 62 
QI, 70 
4 95 
Q* 179 
rank 76 
REL 12 
REL 18 
relativization 5 
respects 5, 6 
rhs 4 
Robinson, A. 180 
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Robinson, R. 8, 36, 180 
Robinson’s theory 8 
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SBR 98 

SBRD 100 

scissors 38 

scope 4, 45 

semibounded replacement 98 

sequence bounds 93 

sequence of «*x 87 

SET 95 

set bounds 93 

set of *«« 87 

Shoenfield 3 et seq. ad inf. 

Solovay 12, 61 

special constants 134 
theorem on — 135 

specific number 73 

SREL 61 

stronger than 6 

subsitution rule 117 

— theorem 118 

superexponentiation 69 

suppose ... thus 7 

symmetry theorem 126 


tacit hypothesis 144 

Tarski 8, 36 

T. 146 

test problem 56 

there exist minimal such 31 
there exist ... such that 7 


unary 5 

unbounded 54 
variables 3, 101 
variant theorem 126 


Wiener 180 
Wilkie 25, 176 


Z 7% 
Zermelo 97 
ZFC 73 


A,[a] 3 

al4 

Cla] 5 

Ac 5 

AC 5 

T|Bi,...,Ba] 6 

v7 

0,+,-8 

c!, C?, C? 12 

Aix) <aj,...,X, <a, 25 
{xey:A} 43 
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p’, p®, p? 54 

ab 54 

#f 87, 60 

C61 

{(z,y) :z€a& min,D} 70 
{(z,y):2€a&D} 72 
{(x,b) :zc€ a} 72 

T 73 

$ 73, 179 

w 73 

A:uj)xX; < a),...,U,x, < a, 84 
° 87 

x’ 101 

ye 115 

* 144, 146 

a® 147 

x 157 

{a,...,a,} 157 
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All 25.10 

appears 30.13 

Arg 23.41 

Arglast 27.25 

atomic formula 23.25 
atomic formula of 27.13 
Atoms 27.2 

Ax 24.16 


Bd 20.8 

belongs 30.3 

Belongs 30.11 

bound in 23.47 

bound occurrence 23.45 


Card 20.4 

Cases 25.23 

Chop 19.6 

closed formula 23.69 
Closure 25.16 
compatible 23.34 
Conj 23.66 

constant 23.14 


Dec 9.24 

Deg 27.27 

delta 30.5 
deltag 30.7 
delta; 30.6 
designator 23.32 
Dis} 23.64 


Dom 12.22 
domain 12.15 


Elim 27.26 
Elimseq 27.30 
Enc 10.14 

enc 10.16 

Enum 20.21 
Enumer 20.20 
equality axiom 24.4 
Equals 24.3 
Exist 25.9 

exp 13.1 
Expcard 20.9 
expcomp 30.17 
Expln 19.14 
Explog 19.12 
Explogfn 19.11 
expression 23.16 
extf 27.40 

extfy 27.21 

extp 27.11 


F 23.3 

formula 23.27 
formula of 24.13 
Formulas 23.26 

Free 25.15 

free in 23.48 

free occurrence 23.46 
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function 12.13 
function symbol 23.4 


Graph 12.20 
Hparg 12.24 


identity axiom 24.2 

ideqax 30.2 

immediate prenex transform 25.60 
immediate variant 25.39 

Imp! 23.65 

Index 23.15 

inferred ... by 3-introduction 24.9 
injection into 20.2 

injective 20.1 

instance 25.7 

interp 28.7 

interpg 28.1 


K 16.4 


Lang 24.15 
language 24.10 
Last, 27.23 

Last, 27.24 

Ln 19.5 

Loc, 19.28 

Loc, 19.29 

Log 16.32 

Logo 14.10(!) 

logical axiom 24.5 
logical symbol 23.12 
Max 9.9 

Maxm 19.2 

Neg 29.23 

Newvar 27.22 

Nls 24.11 

nonlogical symbol] 23.13 
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Occ 20.16 

occurs 19.36 

open formula 29.21 
open theory 29.22 


P 23.5 

P 29.3 

BP 29.7 

power 10.3 

power of 14.6(!) 
power of four 10.2 
power of two 10.1 
predicate symbol 23.6 
prime 9.28 

prod 19.24 

Proj, 16.16 

Proj. 16.17 

proof 24.17 


Q, 29-10 
Qt 9.13 


Ran 12.26 

range 12.16 

Rank 30.4 

replace 25.31 
replace; 25.36 
Replacements 25.30 
Reverse 19.40 

Rm 9.14 

Rple 16.18 

Rstr 13.5 


§ 29.2 

§ 29.6 

sequence 19.4 

set 10.22 

Setlog 19.10 

simultaneously substitutable 23.54 
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Spconst 26.4 
spconstseq 30.1 
special axiom 26.1 
special sequence 30.9 
spdelta 30.12 

Spform 26.3 

Spvar 26.2 

Ssub 19.34 

Ssubfr 23.50 

Sub 19.33 

Subp 29.25 

Subfr 23.49 
substitutable 23.53 
substitute 25.50 
substitution axiom 24.1 
Substitutions 25.49 
sum 19.21 

Sup 19.3 

symbol 23.11 


tautological consequence 24.8 
tautologically consistent 29.24! 
tautology 24.7 

term 23.19 

term of 24.12 

Terms 23.18 

theorem 24.18! 

theory 24.14 

Tr 27.36 

Tr; 27.41 

translation function 27.1 
Trat 27.33 

Tratfn 27.32 

Tratp 27.12 

Trext 27.5 

Trin 27.35 

Trfnp 27.15 
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Trp 27.16 

Truth 29.19 
Truthfn 29.18 

truth valuation 24.6 


Univ 28.5 


Val 29.14 

Valfn 29.13 

variable 23.2 

variable-free 23.68 
variable-free formula of 29.15 
variable-free term of 29.11 
variant 25.41 


X 23.1 
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- 9.2 

/ 9.6 

< 9.10 
19.15 

2 9.16 
39.17 
49.18 

5 9.19 

6 9.20 
79.21 

8 9.22 

9 9.23 

| 9.25 
|- | 10.8 
€ 10.17 
{ } 12.3 
U 12.5 
12.7 
€ 12.8 
{, ) 12.10 
-(-) 12.14 
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€ 14.1! 

7 14.4! 
d 14.8(!) 
#o 14.14(!) 
> 16.9 
fy 16.36! 
* 19.18 
¥ 19.23 
I] 19.26 
-* 19.30 
() 19.32 
-[-,-] 19.35 
x 20.15 
5 23.7 
V 23.8 

3 23.9 

= 23.10 
| ] 23.51 
= 23.55 
Y 23.56 
3 23.57 


¥ 23.58 

= 23.59 & 23.60 
& 23.61 
= 23.62 

# 23.63 

| 24.19 
ef + 25.1 
~ 25.53 
-|-] 26.6 

o 27.6 

“() 28.2 
‘(9 28.4 
0) 28.6 

6 29.1 

+ 29.4 

7 29.5 

F 29.8 
729.9 

do 30.19! 
o 30.24! 
o-consistent 30.25! 
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